CVE-2014-2935: Caldera

High severity, CVSS 10.0. EPSS: 4.4% chance of exploitation in the next 30 days.

costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request.

Affected products

• Caldera Caldera: version 9.20 only

Published 2014-05-08. Last modified 2026-06-17.