CVE-2013-4835

published 2013-11-04

CVE-2013-4835: The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

EXPLOIT

The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
hp	sitescope	—	—
hp	sitescope	—	—
hp	sitescope	—	—
hp	sitescope	—	—
hp	sitescope	—	—
hp	sitescope	—	—
hp	sitescope	—	—
hp	sitescope	—	—
hp	sitescope	—	—