VULNERABILITY INTELLIGENCE

CVE-2014-3006

CVSS score6.8 MEDIUM
EPSS probability1.31%
CISA KEVNot currently listed
Published2014-05-02
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly restrict access, which allows remote attackers to change the manager account password and obtain sensitive information via a request to install/.

Primary references