CVE-2012-3264

Severity Score

7.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472.

Una vulnerabilidad no especificada en el SOAP de HP SiteScope v11.10 a v11.12 permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos. Se trata deun problema también conocido como ZDI-CAN-1472

*Credits: N/A

CVSS Scores

NISTv2 7.5

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-06-06 CVE Reserved
2012-09-21 CVE Published
2024-08-06 CVE Updated
2024-10-14 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (2)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03489683	2019-10-09
http://marc.info/?l=bugtraq&m=134825051608877&w=2	2019-10-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Hp Search vendor "Hp"		Sitescope Search vendor "Hp" for product "Sitescope"				11.10 Search vendor "Hp" for product "Sitescope" and version "11.10"		-		Affected
Hp Search vendor "Hp"		Sitescope Search vendor "Hp" for product "Sitescope"				11.11 Search vendor "Hp" for product "Sitescope" and version "11.11"		-		Affected
Hp Search vendor "Hp"		Sitescope Search vendor "Hp" for product "Sitescope"				11.12 Search vendor "Hp" for product "Sitescope" and version "11.12"		-		Affected