Lucene search
HpCVE-2014-2617HistoryJul 07, 2014 - 11:01 a.m.
CVE-2014-2617
2014-07-0711:01:29
hp
web.nvd.nist.gov
32
cve-2014-2617
hp universal cmdb
vulnerability
remote code execution
sensitive information
zdi-can-2104
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.179
Percentile
96.2%
Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2104.
Affected configurations
Node
hpuniversal_configuration_management_databaseMatch10.01
ORhpuniversal_configuration_management_databaseMatch10.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hp | universal_configuration_management_database | 10.01 | cpe:2.3:a:hp:universal_configuration_management_database:10.01:*:*:*:*:*:*:* |
| hp | universal_configuration_management_database | 10.10 | cpe:2.3:a:hp:universal_configuration_management_database:10.10:*:*:*:*:*:*:* |
Related
checkpoint_advisories
checkpoint_advisories
HP Universal CMDB Default Credentials Arbitrary File Upload (CVE-2014-2617)
2014-09-21 00:00:00
prion
prion
Design/Logic Flaw
2014-07-07 11:01:00
cvelist
cvelist
CVE-2014-2617
2014-07-07 10:00:00
nvd
nvd
CVE-2014-2617
2014-07-07 11:01:29
zdi
zdi
securityvulns
securityvulns
[security bulletin] HPSBMU03064 rev.1 - HP Universal CMDB, Remote Information Disclosure, Execution of Code
2014-10-16 00:00:00
HP Universal CMDB security vulnerabilities
2014-10-16 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.179
Percentile
96.2%
Related for CVE-2014-2617