CVE-2014-5160
** DISPUTED ** Multiple directory traversal vulnerabilities in crs.exe in the Cell Request...
CVE-2014-5160 is a medium vulnerability (CVSS 6.4) in Hp Data Protector, published August 1, 2014. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 34.8%, the 98th percentile.
- Severity
- 6.4 MediumCVSS 2.0, NVD
- Exploit chance
- 34.8%EPSS, 98th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. NOTE: the vendor reportedly asserts that this behavior is "by design.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. NOTE: the vendor reportedly asserts that this behavior is "by design.
- Record
CVE-2014-5160- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE ListNo score
Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. NOTE: the vendor reportedly asserts that this behavior is "by design.
- Record
CVE-2014-5160- Updated
- 2026-11-02
EUVDEUVD-2014-5058No score
Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. NOTE: the vendor reportedly asserts that this behavior is "by design.
- Record
EUVD-2014-5058- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-542w-9rgx-v3rqNo score
** DISPUTED ** Multiple directory traversal vulnerabilities in crs.exe in the Cell Request...
** DISPUTED ** Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. NOTE: the vendor reportedly asserts that this behavior is "by design."
- Record
GHSA-542w-9rgx-v3rq- Weakness
- CWE-22
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.