CVE-2009-3999: HP Power Manager

High severity, CVSS 10.0. EPSS: 71.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter.

Affected products

• HP Power Manager: up to and including 4.2.9; version 4.2.5 only; version 4.2.6 only

Published 2010-01-20. Last modified 2026-06-16.