{"id":"CVE-2014-2612","aliases":["EUVD-2014-2644","GHSA-rqv3-hfq6-w2fr"],"status":"published","title":"Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003...","description":"Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to obtain sensitive information via unknown vectors.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06839,"percentile":0.94072,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2014-06-28T15:00:00Z","modified":"2026-06-17T00:06:54Z","exploits":[{"source":"exploitdb","id":"EDB-33434","title":"HP Release Control - (Authenticated) XML External Entity (Metasploit)","type":"webapps","platform":"windows","date":"2014-05-19","url":"https://www.exploit-db.com/exploits/33434"}],"products":[{"vendor":"hp","product":"release_control"}],"references":[{"url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04352674","tags":["vendor-advisory","x_refsource_HP","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1030490","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/68244","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2612"},{"url":"https://github.com/advisories/GHSA-rqv3-hfq6-w2fr"}],"sources":{"cve":[{"id":"CVE-2014-2612","description":"Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to obtain sensitive information via unknown vectors.","status":"published","published":"2014-06-28T15:00:00Z","modified":"2024-08-06T10:21:35.636Z","updated_at":"2026-11-02T14:33:43.883586Z"}],"euvd":[{"id":"EUVD-2014-2644","description":"Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to obtain sensitive information via unknown vectors.","status":"published","published":"2014-06-28T15:00:00Z","modified":"2024-08-06T10:21:35Z","updated_at":"2026-11-03T01:57:13.484356Z"}],"ghsa":[{"id":"GHSA-rqv3-hfq6-w2fr","title":"Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003...","description":"Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to obtain sensitive information via unknown vectors.","status":"published","published":"2022-05-17T04:39:21Z","modified":"2023-01-28T05:02:07Z","updated_at":"2026-11-02T14:43:43.004433Z"}],"nvd":[{"id":"CVE-2014-2612","description":"Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to obtain sensitive information via unknown vectors.","status":"published","published":"2014-06-28T15:55:07.85Z","modified":"2026-06-17T00:06:54.767Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:54.464139Z"}]}}