CVE-2014-6258

CVE-2014-6258 describes a denial-of-service vulnerability in Zenoss Core through 5 Beta 3, where an unspecified endpoint can be exploited to cause high CPU consumption through arbitrary regular-expression match attempts. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and can be exploited remotely with low attack complexity, leading to a partial denial of service. There is no evidence of active exploitation, nor are there publicly available Metasploit or Nuclei exploits. Despite limited community discussion and media coverage, SecurityWeek did report on numerous Zenoss Core vulnerabilities, including this one.