CVE-2014-125030

CRITICAL 9.8CVE-2014-125030 · Published 01/01/2023 · updated 17/06/2026

In short

CVE-2014-125030 is a CRITICAL (CVSS 9.8) vulnerability affecting empress (empress project).
Chance of exploitation in the next 30 days (EPSS): 0.95%, higher than 61.5% of all vulnerabilities.
Fix: update to 2014-12-02 or later.

Package	Affected versions	Patched versions
empress empress_project	`< 2014-12-02`	`2014-12-02`

Description

A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected by this issue is some unknown functionality. The manipulation leads to use of hard-coded password. The patch is identified as 557e177d8a309d6f0f26de46efb38d43e000852d. It is recommended to apply a patch to fix this issue. VDB-217154 is the identifier assigned to this vulnerability.

References

taoeffect/empress commit 557e177 · Patch
taoeffect/empress#61 · Third Party Advisory
vuldb.com · Third Party Advisory
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free