CVE-2013-4835
CVE-2013-4835
Vexday Risk Score
60Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 71.0%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado
Lifecycle
30 Oct 2013Metasploit module available
04 Nov 2013Published on NVD
24 Dec 2013Public PoC
Weaponization speed
49 daysto first PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/30473unverifiedexploitdbwww.exploit-db.com/exploits/30473unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.