What is the CVSS score of CVE-2014-2565?

CVE-2014-2565 has a CVSS 2.0 base score of 6.5 (Medium). CVSS vector: AV:A/AC:H/Au:S/C:C/I:C/A:C. EPSS exploitation probability: 0.6%.

Content Analysis System Software CVE-2014-2565

MEDIUM

OS Command Injection (CWE-78)

2014-04-30 cve@mitre.org

Command Injection Content Analysis System Software Content Analysis System

6.5

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:A/AC:H/Au:S/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:H/Au:S/C:C/I:C/A:C

Attack Vector

Adjacent

Attack Complexity

High

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Apr 30, 2014 - 14:22 cve.org

MEDIUM 6.5

DescriptionCVE.org

The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to "command injection."

AnalysisAI

Technical ContextAI

This vulnerability is classified as OS Command Injection (CWE-78), which allows attackers to execute arbitrary operating system commands on the host. The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to "command injection." Affected products include: Bluecoat Content Analysis System Software, Bluecoat Content Analysis System. Version information: before 1.1.4.2.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Avoid passing user input to shell commands. Use language-specific APIs instead of shell execution. Apply strict input validation with allowlists.