The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805.
Conclusion & alert: CVE-2014-5210 is rated High Exploit Risk (86/100): CVSS Critical severity, with high exploitation likelihood (EPSS 16.97%, 95th percentile). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
| EDB-ID | Source | Kind | Published | Link |
|---|---|---|---|---|
| 42697 | exploit_db | edb | 2014-08-14 | Exploit-DB ↗ |
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-04-06 | 19.19% | 16.97% | -2.22% |
| 2 | 2026-03-18 | 13.51% | 19.19% | +5.68% |
| 3 | 2025-07-06 | — | 13.51% | — |
Full EPSS history (17 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 10.0 | 2.0 | HIGH |
|
10.0 | 10.0 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| alienvault | open_source_security_information_management | <= 4.6.1 | cpe:2.3:a:alienvault:open_source_security_information_management:*:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 1.0.4 | cpe:2.3:a:alienvault:open_source_security_information_management:1.0.4:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 1.0.6 | cpe:2.3:a:alienvault:open_source_security_information_management:1.0.6:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1.2 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1.2:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1.5 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1.5-1 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-1:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1.5-2 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-2:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 2.1.5-3 | cpe:2.3:a:alienvault:open_source_security_information_management:2.1.5-3:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 3.1 | cpe:2.3:a:alienvault:open_source_security_information_management:3.1:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 3.1.9 | cpe:2.3:a:alienvault:open_source_security_information_management:3.1.9:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 3.1.10 | cpe:2.3:a:alienvault:open_source_security_information_management:3.1.10:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 3.1.12 | cpe:2.3:a:alienvault:open_source_security_information_management:3.1.12:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.0 | cpe:2.3:a:alienvault:open_source_security_information_management:4.0:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.0.3 | cpe:2.3:a:alienvault:open_source_security_information_management:4.0.3:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.0.4 | cpe:2.3:a:alienvault:open_source_security_information_management:4.0.4:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.1 | cpe:2.3:a:alienvault:open_source_security_information_management:4.1:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.1.2 | cpe:2.3:a:alienvault:open_source_security_information_management:4.1.2:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.1.3 | cpe:2.3:a:alienvault:open_source_security_information_management:4.1.3:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.2 | cpe:2.3:a:alienvault:open_source_security_information_management:4.2:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.2.2 | cpe:2.3:a:alienvault:open_source_security_information_management:4.2.2:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.2.3 | cpe:2.3:a:alienvault:open_source_security_information_management:4.2.3:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.3 | cpe:2.3:a:alienvault:open_source_security_information_management:4.3:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.3.1 | cpe:2.3:a:alienvault:open_source_security_information_management:4.3.1:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.3.2 | cpe:2.3:a:alienvault:open_source_security_information_management:4.3.2:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.3.3 | cpe:2.3:a:alienvault:open_source_security_information_management:4.3.3:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.4 | cpe:2.3:a:alienvault:open_source_security_information_management:4.4:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.5 | cpe:2.3:a:alienvault:open_source_security_information_management:4.5:*:*:*:*:*:*:* |
| alienvault | open_source_security_information_management | 4.6 | cpe:2.3:a:alienvault:open_source_security_information_management:4.6:*:*:*:*:*:*:* |