AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-4812

HIGH · CVSS 10 EPSS 51.90%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-09-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2013-4812
Severity
HIGH
CVSS
10
EPSS
51.90%

Original NVD Description

UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-1743.