CVE-2014-7883

Name: CVE-2014-7883
Creator: NVD / NIST
Published: 2015-02-15T20:59:00.12+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 37.02%

Last modified Jun 17, 2026

CVE-2014-7883 is a vulnerability of currently unknown severity. HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.. EPSS estimates a 37.02% chance of exploitation in the next 30 days.

Description

HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.

Metrics

EPSS Probability

37.02%

98.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-200

Affected Software

Vendor	Product	Versions
Hp	Universal Configuration Management Database	9.05
Hp	Universal Configuration Management Database	10.01
Hp	Universal Configuration Management Database	10.11

References

http://www.kb.cert.org/vuls/id/867593Third Party Advisory, US Government Resource
http://www.securitytracker.com/id/1031688Third Party Advisory, VDB Entry
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04553906Not Applicable
http://www.kb.cert.org/vuls/id/867593Third Party Advisory, US Government Resource
http://www.securitytracker.com/id/1031688Third Party Advisory, VDB Entry
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04553906Not Applicable

Timeline

Published: Feb 15, 2015
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-7883?

HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.

How severe is CVE-2014-7883?

Severity scoring for CVE-2014-7883 is pending analysis. The EPSS model estimates a 37.02% probability of exploitation in the next 30 days.

How do I fix CVE-2014-7883?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-7883?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST