What is the CVSS score of CVE-2014-2634?

CVE-2014-2634 has a CVSS 2.0 base score of 9.4 (Critical). CVSS vector: AV:N/AC:L/Au:N/C:N/I:C/A:C. EPSS exploitation probability: 5.4%.

Service Manager CVE-2014-2634

CRITICAL

2014-08-23 hp-security-alert@hp.com

HP Denial Of Service Service Manager

9.4

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

9.4 CRITICAL

AV:N/AC:L/Au:N/C:N/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:C/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

Availability

Lifecycle Timeline

CVE Published

Aug 23, 2014 - 23:55 cve.org

CRITICAL 9.4

DescriptionCVE.org

AnalysisAI

Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of. Rated critical severity (CVSS 9.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors. Affected products include: Hp Service Manager. Version information: before 9.34.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Service Manager

View all

CVE-2014-2632 CRITICAL Emergency

10.0 Aug 23

Unspecified vulnerability in the WebTier component in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote att

CVE-2013-4808 CRITICAL Act Now

10.0 Aug 18

Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31 and Service Center 6.2.8 allows remote attack

CVE-2016-1998 CRITICAL Act Now

9.8 Mar 22

HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary comman

CVE-2020-0595 CRITICAL Act Now

9.8 Jun 15

Use after free in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.6

CVE-2020-0594 CRITICAL Act Now

9.8 Jun 15

Out-of-bounds read in IPv6 subsystem in Intel(R) AMT and Intel(R) ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12

CVE-2021-33231 MEDIUM This Month POC

5.4 Oct 20

Cross Site Scripting (XSS) vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote a

CVE-2013-4830 HIGH This Week

7.5 Oct 16

HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" ap

CVE-2019-11666 HIGH This Week

8.8 Sep 17

Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34,

CVE-2019-11646 HIGH This Week

8.8 Jun 03

Remote unauthorized command execution and unauthorized disclosure of information in Micro Focus Service Manager, version

CVE-2013-4844 HIGH This Week

7.5 Nov 29

Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote

CVE-2019-11661 HIGH This Week

8.3 Sep 18

Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34

CVE-2016-4371 HIGH This Week

8.0 Jun 19

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obt

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

CVE-2014-2634 vulnerability details – vuln.today

Back