Unscored severity · published May 8, 2014
CVE-2014-2602
Unspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to gain privileges via unknown vectors
–
CVSS
2%
EPSS
No
On KEV
Description
Unspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to gain privileges via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ON
Oneview · HP
1.0; 1.01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2602
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2602
Vendor Advisory
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04273152
More from Oneview
9.8
CVE-2023-30909
A remote authentication bypass issue exists in some OneView APIs
9.8
CVE-2023-30908
A remote authentication bypass issue exists in a OneView API
9.8
CVE-2022-28616
A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0
9.8
CVE-2022-28617
A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0
8.8
CVE-2020-7198
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer