CVE-2014-9016
CVSS Score Not Available
79.79%
HIGH RiskEPSS (99th percentile)
The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x-2.1 for Drupal allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted request.
Published: 11/24/2014
Modified: 4/12/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
79.79%HIGH Exploitation Risk
99th percentile
This vulnerability has a 79.79% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.