« Volver al listado

CVE-2013-4830

Estado: ModificadaAlta (7.5)—

HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" approach.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Service Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4830",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-10-16T10:52:20.197",
  "references": [
    {
      "url": "http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03960916",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified \"injection\" approach."
    },
    {
      "lang": "es",
      "value": "HP Service Manager 9.30 hasta la versión 9.32 permite a atacantes remotos ejecutar código arbitrario a través de una inyección sin especificar."
    }
  ],
  "lastModified": "2026-06-16T23:57:58.090",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:service_manager:9.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F32B79D7-0C89-475B-B714-3CB1D7064491"
            },
            {
              "criteria": "cpe:2.3:a:hp:service_manager:9.31:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3065EC7-1FE4-4715-BF04-09D7CB7F9C8A"
            },
            {
              "criteria": "cpe:2.3:a:hp:service_manager:9.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05C97132-741B-4EA8-9023-CAD01A7651EF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}