Unscored severity · published Nov 4, 2013
CVE-2013-4835
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to…
–
CVSS
71%
EPSS
No
On KEV
Description
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.
Exploitation
Is it being used?
Exploit prediction (EPSS)71.0% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Sitescope · HP
10.11; 10.13; 11.01; 11.1; 11.10; 11.11; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4835
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4835
www.exploit-db.com
http://www.exploit-db.com/exploits/30473
Vendor Advisory
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435
h20566.www2.hpe.com
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03969435
More from Sitescope
9.8
CVE-2017-14349
An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing…
7.8
CVE-2017-8951
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found
7.5
CVE-2015-2802
An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset…
7.5
CVE-2017-8952
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found
5.5
CVE-2017-8950
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found