CVE-2014-3915: The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote...

Security readout for executives and security teams

CVE-2014-3915 describes a remote command execution issue in Rocket Servergraph’s Admin Center for Tivoli Storage Manager. If that administrative servlet is reachable, an attacker may be able to run arbitrary system commands. The source bundle does not provide CVSS, fixed versions, or confirmed exploitation. Exposure is most likely where Rocket Servergraph Admin Center for Tivoli Storage Manager is deployed and reachable over a network, especially from untrusted users. The provided affected-product metadata is incomplete, so teams should verify actual Rocket Servergraph deployment and version details internally. Treat this as a high-priority legacy administrative-system risk if Rocket Servergraph is present. Remote command execution against a management interface can affect backup and storage operations, but urgency depends on confirmed deployment, reachability, and vendor fix status. Mitigation focus: Identify Rocket Servergraph Admin Center deployments supporting Tivoli Storage Manager.; Check Rocket and relevant vendor advisories for fixed versions or supported mitigations.; Restrict Admin Center access to trusted management networks and administrators..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.