Is CVE-2014-7878 being actively exploited?

CVE-2014-7878 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2014-7878?

CVE-2014-7878 has a CVSS 2.0 base score of 10.0 (HIGH).

CVE-2014-7878

HIGH · CVSS 10.0EPSS 10.3%EU EUVD

The Application Lifecycle Service (ALS) in HP Helion Cloud Development Platform 1.0, when a virtual machine is derived from the Seed Node image, uses the same security keys across different customers' installations, which allows remote attackers to execute arbitrary code by leveraging these keys for a connection.

Key facts

CVSS score: 10.0 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness (CWE): CWE-310
EPSS score: 10.3% (96th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2014-7728)
Published: November 14, 2014
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2014-7728 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

hp / helion cloud development platform
hp / helion cloud development platform

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain