{"api_version":"1","generated_at":"2026-07-23T10:42:25+00:00","cve":"CVE-2014-2610","urls":{"html":"https://cve.report/CVE-2014-2610","api":"https://cve.report/api/cve/CVE-2014-2610.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-2610","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-2610"},"summary":{"title":"CVE-2014-2610","description":"Directory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117.","state":"PUBLISHED","assigner":"hp","published_at":"2014-06-19 10:50:04","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.1","severity":"","vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securitytracker.com/id/1030439","name":"http://www.securitytracker.com/id/1030439","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP IT Executive Scorecard Bugs Let Remote Users Traverse the Directory and Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/59363","name":"http://secunia.com/advisories/59363","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA59363 - HP IT Executive Scorecard Multiple Vulnerabilities - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295","name":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/68093","name":"http://www.securityfocus.com/bid/68093","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP Executive Scorecard Multiple Unspecified Remote Code Execution Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://zerodayinitiative.com/advisories/ZDI-14-209/","name":"http://zerodayinitiative.com/advisories/ZDI-14-209/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Zero Day Initiative","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2610","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2610","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"2610","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"executive_scorecard","cpe6":"9.40","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"2610","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"executive_scorecard","cpe6":"9.41","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T10:21:35.245Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"59363","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/59363"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://zerodayinitiative.com/advisories/ZDI-14-209/"},{"name":"68093","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/68093"},{"name":"1030439","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1030439"},{"name":"SSRT101435","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295"},{"name":"HPSBMU03048","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-06-17T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2014-06-20T12:57:00.000Z","orgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","shortName":"hp"},"references":[{"name":"59363","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/59363"},{"tags":["x_refsource_MISC"],"url":"http://zerodayinitiative.com/advisories/ZDI-14-209/"},{"name":"68093","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/68093"},{"name":"1030439","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1030439"},{"name":"SSRT101435","tags":["vendor-advisory","x_refsource_HP"],"url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295"},{"name":"HPSBMU03048","tags":["vendor-advisory","x_refsource_HP"],"url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"hp-security-alert@hp.com","ID":"CVE-2014-2610","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"59363","refsource":"SECUNIA","url":"http://secunia.com/advisories/59363"},{"name":"http://zerodayinitiative.com/advisories/ZDI-14-209/","refsource":"MISC","url":"http://zerodayinitiative.com/advisories/ZDI-14-209/"},{"name":"68093","refsource":"BID","url":"http://www.securityfocus.com/bid/68093"},{"name":"1030439","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1030439"},{"name":"SSRT101435","refsource":"HP","url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295"},{"name":"HPSBMU03048","refsource":"HP","url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295"}]}}}},"cveMetadata":{"assignerOrgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","assignerShortName":"hp","cveId":"CVE-2014-2610","datePublished":"2014-06-19T10:00:00.000Z","dateReserved":"2014-03-24T00:00:00.000Z","dateUpdated":"2024-08-06T10:21:35.245Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-06-19 10:50:04","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:executive_scorecard:9.40:*:*:*:*:*:*:*","matchCriteriaId":"889B3BF4-4F13-4712-87C7-2D369E085DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:executive_scorecard:9.41:*:*:*:*:*:*:*","matchCriteriaId":"DDF9E6D5-E8ED-48E8-B92A-2D5F4923BC27"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"2610","Ordinal":"1","Title":"CVE-2014-2610","CVE":"CVE-2014-2610","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"2610","Ordinal":"1","NoteData":"Directory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117.","Type":"Description","Title":"CVE-2014-2610"},{"CveYear":"2014","CveId":"2610","Ordinal":"2","NoteData":"2014-06-19","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"2610","Ordinal":"3","NoteData":"2014-06-20","Type":"Other","Title":"Modified"}]}}}