VULNERABILITY INTELLIGENCE

CVE-2014-2610

CVSS score7.1 HIGH
EPSS probability5.30%
CISA KEVNot currently listed
Published2014-06-19
Last modified2026-06-17
CVSS vectorAV:N/AC:H/Au:S/C:C/I:C/A:C

Description

Directory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references