Description
Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120.
Metrics
CVSS 2.0 9.0/10
AV:N/AC:L/Au:S/C:C/I:C/A:CWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://secunia.com/advisories/59363Third Party Advisory
- http://www.securityfocus.com/bid/68093Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030439Third Party Advisory, VDB Entry
- http://zerodayinitiative.com/advisories/ZDI-14-210/Third Party Advisory, VDB Entry
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295Vendor Advisory
- http://secunia.com/advisories/59363Third Party Advisory
- http://www.securityfocus.com/bid/68093Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030439Third Party Advisory, VDB Entry
- http://zerodayinitiative.com/advisories/ZDI-14-210/Third Party Advisory, VDB Entry
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295Vendor Advisory
Timeline
- Published
- Jun 19, 2014
- Last modified
- Jun 17, 2026
- NVD status
- Modified