[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTqC_haz6Q9-D-LAnp93C2hEYRA2ePJR-GM8mYgKWMPU":3,"g5a-risk:CVE-2014-2595":155},{"success":4,"data":5,"meta":153},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":27,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":52,"references":53,"referencesCount":101,"weaknesses":102,"weaknessesCount":52,"isActivelyExploited":41,"cisaInfo":27,"otxData":27,"relatedBlogPosts":110,"seoMetadata":111,"configurations":136,"relatedVendorCves":144,"notableEvents":145},"CVE-2014-2595","What is CVE-2014-2595?","Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.","Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained f...","2020-02-12T01:15:10.547","2026-06-17T00:06:51.433",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":42},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[32],{"Source":17,"Type":18,"CVSSData":33,"BaseSeverity":25,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":41,"ObtainAllPrivilege":41,"ObtainUserPrivilege":41,"ObtainOtherPrivilege":41,"UserInteractionRequired":41},{"Version":34,"VectorString":35,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":38,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,[],0.16868,[43,43,43,43,43,43,43],"Critical",[47],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"barracuda","web_application_firewall","7.8.1.013","cpe:2.3:a:barracuda:web_application_firewall:7.8.1.013:*:*:*:*:*:*:*",1,[54,61,66,71,75,79,83,87,89,91,93,95,97,99],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F127740\u002FBarracuda-WAF-Authentication-Bypass.html","Packetstormsecurity",[58,59,60],"Exploit","Third Party Advisory","VDB Entry",{"url":62,"source":63,"tags":64},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2014\u002FAug\u002F5","Seclists",[58,65,59],"Mailing List",{"url":67,"source":68,"tags":69},"http:\u002F\u002Fwww.osvdb.org\u002F109782","Osvdb",[70],"Broken Link",{"url":72,"source":73,"tags":74},"https:\u002F\u002Fvulners.com\u002Fsecurityvulns\u002FSECURITYVULNS:DOC:31004","Vulners",[58,59],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F39278","Exploit-db",[58,59,60],{"url":80,"source":81,"tags":82},"https:\u002F\u002Fwww.portcullis-security.com\u002Fsecurity-research-and-downloads\u002Fsecurity-advisories\u002Fcve-2014-2595\u002F","Portcullis-security",[70],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F69028","Securityfocus",[58,59,60],{"url":55,"source":56,"tags":88},[58,59,60],{"url":62,"source":63,"tags":90},[58,65,59],{"url":67,"source":68,"tags":92},[70],{"url":72,"source":73,"tags":94},[58,59],{"url":76,"source":77,"tags":96},[58,59,60],{"url":80,"source":81,"tags":98},[70],{"url":84,"source":85,"tags":100},[58,59,60],14,[103],{"id":104,"name":105,"description":106,"extendedDescription":38,"status":107,"abstraction":108,"structure":109},"CWE-613","Insufficient Session Expiration","According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","Incomplete","Base","Simple",[],{"title":112,"metaDescription":113,"keywords":114,"canonicalUrl":115,"structuredData":116},"What is CVE-2014-2595? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2014-2595, a critical severity cyber security vulnerability from 2020. Barracuda Web Application Firewall (WAF) 7.8.1.013 allow...","CVE-2014-2595, CVE-2014-2595 vulnerability, CVE-2014-2595 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, barracuda security, web_application_firewall vulnerability","\u002Fwhat-is\u002Fcve-2014-2595",{"@context":117,"@type":118,"headline":112,"description":113,"datePublished":10,"dateModified":11,"author":119,"publisher":123,"about":127,"mainEntityOfPage":131,"articleSection":134,"keywords":135},"https:\u002F\u002Fschema.org","TechArticle",{"@type":120,"name":121,"url":122},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":120,"name":121,"url":122,"logo":124},{"@type":125,"url":126},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":128,"name":6,"description":129,"additionalType":130},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":132,"@id":133},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2014-2595","Cybersecurity","CVE-2014-2595, CVE-2014-2595 vulnerability, CVE-2014-2595 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[137],{"Operator":27,"Negate":27,"Nodes":138},[139],{"Operator":140,"Negate":41,"CPEMatch":141},"OR",[142],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"94424858-F745-428A-A27A-D265BD695E2F",[],[146],{"id":147,"eventType":148,"eventTime":149,"details":150,"label":151,"color":152},"3f085ec5-bc1f-403d-b7d7-b55b7d258b94","LOW_EPSS_DELTA","2026-06-16T04:06:43.75575+00:00","Daily EPSS score decreased by 0.410 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":154,"version":34},1794633324383,{"score":156,"band":157,"action":158,"scoredAt":159},59,"Medium","Plan remediation","2026-11-13T06:49:13.023156+00:00"]