HP Executive Scorecard vulnerabilities

3 CVEs affecting HP Executive Scorecard, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2611, published 2014-06-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-2609, published 2014-06-19. High severity, CVSS 10.0. EPSS: 12.9% chance of exploitation in the next 30 days. The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka…
CVE-2014-2611, published 2014-06-19. High severity, CVSS 9.0. EPSS: 11.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or…
CVE-2014-2610, published 2014-06-19. High severity, CVSS 7.1. EPSS: 5.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Content Acceleration Pack (CAP) web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by…