VulnerabilityModified
CVE-2014-2634
Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors.
HIGH 9.4EPSS 6.41%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.41%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors.
- CVSS 2.0
- 9.4 HIGHAV:N/AC:L/Au:N/C:N/I:C/A:C
- EPSS
- 6.41% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- hp/service manager
- Source
- hp-security-alert@hp.com
References
- http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127Vendor Advisory
- http://secunia.com/advisories/60028
- http://secunia.com/advisories/60714
- http://www.securityfocus.com/bid/69379
- http://www.securitytracker.com/id/1030756
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95450
- http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127Vendor Advisory
- http://secunia.com/advisories/60028
- http://secunia.com/advisories/60714
- http://www.securityfocus.com/bid/69379
- http://www.securitytracker.com/id/1030756
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95450
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.