CVE-2012-3259

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461.

Vulnerabilidad no especificada en la función SOAP en HP SiteScope 1v1.10 hasta 11.12 permite a atacantes remotos ejecutar código a través de vectores no especificados, tambíen conocido como ZDI-CAN-1461.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-06-06 CVE Reserved
2012-09-25 CVE Published
2024-08-06 CVE Updated
2024-10-14 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (2)

URL	Tag	Source
https://exchange.xforce.ibmcloud.com/vulnerabilities/78877	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03489683	2017-08-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Hp Search vendor "Hp"		Sitescope Search vendor "Hp" for product "Sitescope"				11.10 Search vendor "Hp" for product "Sitescope" and version "11.10"		-		Affected
Hp Search vendor "Hp"		Sitescope Search vendor "Hp" for product "Sitescope"				11.11 Search vendor "Hp" for product "Sitescope" and version "11.11"		-		Affected
Hp Search vendor "Hp"		Sitescope Search vendor "Hp" for product "Sitescope"				11.12 Search vendor "Hp" for product "Sitescope" and version "11.12"		-		Affected