VULNERABILITY INTELLIGENCE

CVE-2014-3460

CVSS score6.8 NONE
EPSS probability3.27%
CISA KEVNot currently listed
Published2014-05-20
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname.

Weakness classification

  • nvd@nist.gov: CWE-22

Primary references