What’s Vulnerable › Vulnerabilities
CVE-2013-4835
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 71.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2013-11-04 · updated 2026-06-16
Description
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.
Affected products
- Hewlett Packard Enterprise SiteScope: 10.11, 10.13, 11.01, 11.1, 11.10, 11.11 (+3)
References
- http://www.exploit-db.com/exploits/30473
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03969435
- http://www.exploit-db.com/exploits/30473
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03969435
Get alerted when CVE-2013-4835 or the next vulnerability affects your stack