CVE-2014-3804 in Open Source Security Information Management信息

摘要

由 VulDB • 2026-07-20

AlienVault OSSIM 4.7.0 版本之前的 av-centerd SOAP 服务允许远程攻击者通过构造的 (1) update_system_info_debian_package、(2) ossec_task、(3) set_ossim_setup admin_ip、(4) sync_rserver 或 (5) set_ossim_setup framework_ip 请求执行任意命令，这与 CVE-2014-3805 是不同的漏洞。

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2014-05-21

披露

2014-06-13

管理

已接受

条目

VDB-70042

CPE

准备好

CWE

CWE-94 (已确认)

利用

下载

CVSS

10.0 (NVD)

EPSS

0.72376

KEV

否

活动

非常低

部门

Agriculture, Transportation, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2014-3804
NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-3804
CVE Details	https://www.cvedetails.com/cve/CVE-2014-3804/

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!