AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-9493

MEDIUM · CVSS 5.5 EPSS 2.77%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-01-07 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.5. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.

CVE
CVE-2014-9493
Severity
MEDIUM
CVSS
5.5
EPSS
2.77%

Original NVD Description

The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.2.2 and 2014.1.4 allows remote authenticated users to read or delete arbitrary files via a full pathname in a file: URL in the image location property.