Back to Database
Status published
Critical
CVE-2014-2935
costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to...
Vulnerability Description
costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2935
Credits & Attribution
No credits recorded in the NVD database.
More from caldera
View All →CVE-2014-2936
The directory manager in Caldera 9.20 allows remote attackers to...
High
7.5
CVE-2014-2934
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers...
High
7.5
CVE-2014-2933
Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote...
Medium
5
CVE-2003-0658
Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0,...
Medium
5
CVE-2002-1231
SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users...
Low
2.1
Affected Vendor
caldera
View all reports →Affected Software
caldera
Vulnerable Versions:
9.20
Timeline
Official Publish:
May 8th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.