« Volver al listado

CVE-2014-2610

Estado: ModificadaAlta (7.1)—

Directory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Executive Scorecard

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-2610",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "HIGH",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "hp-security-alert@hp.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-06-19T10:50:04.237",
  "references": [
    {
      "url": "http://secunia.com/advisories/59363",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/68093",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1030439",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://zerodayinitiative.com/advisories/ZDI-14-209/",
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "hp-security-alert@hp.com"
    },
    {
      "url": "http://secunia.com/advisories/59363",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/68093",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1030439",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://zerodayinitiative.com/advisories/ZDI-14-209/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en la aplicación web Content Acceleration Pack (CAP) en HP Executive Scorecard 9.40 y 9.41 permite a usuarios remotos autenticados ejecutar código arbitrario mediante la subida de un fichero ejecutable, también conocido como ZDI-CAN-2117."
    }
  ],
  "lastModified": "2026-06-17T00:06:54.557",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:executive_scorecard:9.40:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "889B3BF4-4F13-4712-87C7-2D369E085DCD"
            },
            {
              "criteria": "cpe:2.3:a:hp:executive_scorecard:9.41:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDF9E6D5-E8ED-48E8-B92A-2D5F4923BC27"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com"
}