VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 16, 2013· Updated Jun 16, 2026

CVE-2013-4812

CVE-2013-4812

Description

UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-1743.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Microfocus/Identity Driven Manager2 versions
    cpe:2.3:a:hp:identity_driven_manager:4.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:hp:identity_driven_manager:4.0:*:*:*:*:*:*:*
    • (no CPE)range: 4.0
  • Microfocus/ProCurve Manager3 versions
    cpe:2.3:a:hp:procurve_manager:3.20:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:hp:procurve_manager:3.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:procurve_manager:4.0:*:*:*:*:*:*:*
    • (no CPE)range: 3.20, 4.0
  • Microfocus/PCM+llm-create
    Range: 3.20, 4.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.