CVE-2014-2366
Advantech WebAccess Cleartext Storage of Sensitive Information in Memory
upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.
Exploit likelihood
What each source reports
CVE List Score used
Advantech WebAccess Cleartext Storage of Sensitive Information in Memory
upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.
- Record
CVE-2014-2366- CVSS 2.0
- 9.0
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-316
- Updated
- 2026-11-02
EUVDEUVD-2014-2403
upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.
- Record
EUVD-2014-2403- CVSS 2.0
- 9.0 Critical
AV:N/AC:L/Au:S/C:C/I:C/A:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-c244-prpx-2q63 No score
upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover...
upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.
- Record
GHSA-c244-prpx-2q63- Weakness
- CWE-200, CWE-316
- Updated
- 2026-11-02
NVD
upAdminPg.asp in Advantech WebAccess before 7.2 allows remote authenticated users to discover credentials by reading HTML source code.
- Record
CVE-2014-2366- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-316, CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2366 is a vulnerability (CVSS 9.0) in Advantech Webaccess, published July 19, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.31%, the 70th percentile. No source names a fixed version.