CVE-2014-3804: The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary c...

Security readout for executives and security teams

CVE-2014-3804 is a remote command execution issue in AlienVault OSSIM before 4.7.0. A vulnerable SOAP service, av-centerd, could be abused through crafted requests to run arbitrary system commands. For executives, this is high urgency where old OSSIM systems remain reachable because a security platform compromise can affect monitoring integrity. Exposure is most likely where AlienVault OSSIM before 4.7.0 is still deployed and the av-centerd SOAP service is reachable by untrusted users or networks. The bundle does not prove default exposure, internet exposure, or authentication requirements. Prioritize remediation for any reachable legacy OSSIM instance. The business risk is not only server compromise; it can also undermine security monitoring, incident response visibility, and trust in alerts from the affected platform. Mitigation focus: Upgrade AlienVault OSSIM systems older than 4.7.0 to 4.7.0 or later.; Check AlienVault or AT&T Cybersecurity guidance for supported remediation details.; Restrict av-centerd SOAP access to trusted management networks only..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.