What is the CVSS score of CVE-2014-0886?

CVE-2014-0886 has a CVSS 2.0 base score of 7.1 (High). CVSS vector: AV:N/AC:H/Au:S/C:C/I:C/A:C. EPSS exploitation probability: 0.4%.

Lotus Protector For Mail Security CVE-2014-0886

HIGH

OS Command Injection (CWE-78)

2014-03-25 psirt@us.ibm.com

IBM Command Injection Lotus Protector For Mail Security

7.1

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:N/AC:H/Au:S/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:H/Au:S/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

High

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Mar 25, 2014 - 20:55 cve.org

HIGH 7.1

DescriptionCVE.org

The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors.

AnalysisAI

Technical ContextAI

This vulnerability is classified as OS Command Injection (CWE-78), which allows attackers to execute arbitrary operating system commands on the host. The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors. Affected products include: Ibm Lotus Protector For Mail Security. Version information: before 2.8.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Avoid passing user input to shell commands. Use language-specific APIs instead of shell execution. Apply strict input validation with allowlists.