CVE-2013-4835

high HPE
CVSS v3 Base Score
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS Score
78.0%
Exploitation probability in 30 days
Top 1% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
P
Availability
P
Published: November 4, 2013 (4574 days ago)
Last Modified: April 29, 2026
Vendor: HPE
Source: NVD

Description

The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.

CWE

NVD-CWE-noinfo

Affected Products

hp sitescope

References

🔗 www.exploit-db.com 🔗 h20564.www2.hp.com 🔗 h20566.www2.hpe.com 🔗 www.exploit-db.com 🔗 h20564.www2.hp.com