VULNERABILITY INTELLIGENCE
CVE-2017-13984
CVSS score6.5 MEDIUM
EPSS probability2.01%
CISA KEVNot currently listed
Published2017-09-30
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Description
An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal.
Weakness classification
- CWE-287: Improper Authentication