Every CVE Search/ Get API key

CVE-2014-8516

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers...

9.8 CriticalPublic exploit

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

81.7%Down 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.

Record
CVE-2014-8516
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-434
Updated
2026-11-02
CVE List No score

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.

Record
CVE-2014-8516
Updated
2026-11-02
EUVDEUVD-2014-8353 No score

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.

Record
EUVD-2014-8353
Updated
2026-11-03
GitHub AdvisoriesGHSA-xffv-hvpr-87v7 No score

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers...

Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.

Record
GHSA-xffv-hvpr-87v7
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8516 is a critical vulnerability (CVSS 9.8) in Cloudfastpath Netcharts Server, published January 3, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 81.7%, the 99th percentile. No source names a fixed version.

References

MoveEnter Open