CVE-2014-5158
The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors.
- EPSS
- 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- alienvault:open_source_security_information_management
References
- http://forums.alienvault.com/discussion/2559/security-advisory-multiple-vulnerabilities
- http://www.zerodayinitiative.com/advisories/ZDI-14-272/
- http://www.zerodayinitiative.com/advisories/ZDI-14-273/
- http://forums.alienvault.com/discussion/2559/security-advisory-multiple-vulnerabilities
- http://www.zerodayinitiative.com/advisories/ZDI-14-272/