Unscored severity · published Apr 5, 2014
CVE-2014-2600
Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
II
Icewall Identity Manager · HP
4.0; 4.0; 5.0 · source: NVD
IS
Icewall Sso Password Reset Option · HP
10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2600
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2600
Vendor Advisory
http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04214298
More from Icewall Identity Manager
7.5
CVE-2016-3092
The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and…