CVE-2014-2611
high · 9Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120.
9
CVSS
11.9%
EPSS (exploit prob.)
96th
EPSS percentile
2014-06-19
Published
AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| hp | executive_scorecard | 9.40 |
| hp | executive_scorecard | 9.41 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/59363
- http://www.securityfocus.com/bid/68093
- http://www.securitytracker.com/id/1030439
- http://zerodayinitiative.com/advisories/ZDI-14-210/
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295
- http://secunia.com/advisories/59363
- http://www.securityfocus.com/bid/68093
- http://www.securitytracker.com/id/1030439
- http://zerodayinitiative.com/advisories/ZDI-14-210/
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2014-2611