Lucene search

K
nvd[email protected]NVD:CVE-2014-2611
HistoryJun 19, 2014 - 10:50 a.m.

CVE-2014-2611

2014-06-1910:50:04
CWE-22
web.nvd.nist.gov
3

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.023

Percentile

89.7%

Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120.

Affected configurations

NVD
Node
hpexecutive_scorecardMatch9.40
OR
hpexecutive_scorecardMatch9.41

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.023

Percentile

89.7%

Related for NVD:CVE-2014-2611