CVEvulnerability

CVE-2013-4835

7.5 HIGH Published 2013-11-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-11-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.

Affected configurations

• hp sitescope 10.11 • hp sitescope 10.13 • hp sitescope 11.01 • hp sitescope 11.1 • hp sitescope 11.10 • hp sitescope 11.11 • hp sitescope 11.12 • hp sitescope 11.20 • hp sitescope 11.21

References