CVE-2013-4835

Published: Nov 4, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.

Affected (9)

Products: Hp: Sitescope

1 product

Sitescope

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Hp Sitescope	Version 10.11
Hp Sitescope	Version 10.13
Hp Sitescope	Version 11.01
Hp Sitescope	Version 11.10
Hp Sitescope	Version 11.11
Hp Sitescope	Version 11.12
Hp Sitescope	Version 11.1
Hp Sitescope	Version 11.20
Hp Sitescope	Version 11.21

References (6)

http://www.exploit-db.com/exploits/30473

Source: hp-security-alert@hp.com

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435

Source: hp-security-alert@hp.com

Vendor Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03969435

Source: hp-security-alert@hp.com

http://www.exploit-db.com/exploits/30473

Source: af854a3a-2127-422b-91ae-364da2661108

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03969435

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.