Every CVE Search/ Get API key

CVE-2014-4750

IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring...

2.9 Low

IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover credentials by sniffing the network.

Exploit likelihood

0.56%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.9

IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover credentials by sniffing the network.

Record
CVE-2014-4750
CVSS 2.0
2.9 LowAV:A/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover credentials by sniffing the network.

Record
CVE-2014-4750
Updated
2026-11-02
EUVDEUVD-2014-4669 No score

IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover credentials by sniffing the network.

Record
EUVD-2014-4669
Updated
2026-11-03
GitHub AdvisoriesGHSA-378h-8fph-fgpg No score

IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring...

IBM PowerVC Express Edition 1.2.0 before FixPack3 establishes an FTP session for transferring files to a managed IVM, which allows remote attackers to discover credentials by sniffing the network.

Record
GHSA-378h-8fph-fgpg
Weakness
CWE-200
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-4750 is a low vulnerability (CVSS 2.9) in Ibm Powervc, published August 20, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 47th percentile. No source names a fixed version.

References

MoveEnter Open