Unrated severityNVD Advisory· Published Aug 1, 2014· Updated May 6, 2026
CVE-2014-5160
CVE-2014-5160
Description
Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. NOTE: the vendor reportedly asserts that this behavior is "by design.
Affected products
2cpe:2.3:a:hp:data_protector:6.10:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hp:data_protector:6.10:*:*:*:*:*:*:*
- cpe:2.3:a:hp:data_protector:6.11:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.