VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 19, 2014· Updated Jun 17, 2026

CVE-2014-2609

CVE-2014-2609

Description

The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka ZDI-CAN-2116.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Microfocus/Executive Scorecard3 versions
    cpe:2.3:a:hp:executive_scorecard:9.40:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:hp:executive_scorecard:9.40:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:executive_scorecard:9.41:*:*:*:*:*:*:*
    • (no CPE)range: 9.40, 9.41

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.