{"id":"CVE-2013-6221","url":"https://www.cyber-defence.io/tools/cve/CVE-2013-6221","generatedAt":"2026-11-05T06:59:02.323Z","title":"Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via…","description":"Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-2031.","published":"2014-06-18T16:55:07.000Z","lastModified":"2026-06-17T00:00:11.000Z","status":"Modified","sourceIdentifier":"hp-security-alert@hp.com","cvss":{"version":"2.0","score":10,"severity":"HIGH","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C"},"cwe":["CWE-22"],"affected":["hp/service virtualization"],"epss":{"score":0.77935,"percentile":0.99572,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2014-06-27","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":33891,"kind":"exploit","title":"HP AutoPass License Server - Arbitrary File Upload (Metasploit)","url":"https://www.exploit-db.com/exploits/33891","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/remote/33891.rb","file":"exploits/java/remote/33891.rb","published":"2014-06-27","added":"2014-06-27","updated":"2014-06-27","author":"Metasploit","type":"remote","platform":"java","port":5814,"verified":true,"codes":["CVE-2013-6221","OSVDB-107943"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 77.9%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/127247/HP-AutoPass-License-Server-File-Upload.html","source":"hp-security-alert@hp.com"},{"url":"http://www.exploit-db.com/exploits/33891","source":"hp-security-alert@hp.com"},{"url":"http://www.osvdb.org/107943","source":"hp-security-alert@hp.com"},{"url":"http://www.securitytracker.com/id/1030385","source":"hp-security-alert@hp.com"},{"url":"http://zerodayinitiative.com/advisories/ZDI-14-195/","source":"hp-security-alert@hp.com"},{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_autopass_license_traversal.rb","source":"hp-security-alert@hp.com"},{"url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04333125","tags":["Vendor Advisory"],"source":"hp-security-alert@hp.com"},{"url":"http://packetstormsecurity.com/files/127247/HP-AutoPass-License-Server-File-Upload.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/33891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/107943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://zerodayinitiative.com/advisories/ZDI-14-195/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_autopass_license_traversal.rb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04333125","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-6221","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}