CVE-2009-4000: HP Power Manager

High severity, CVSS 10.0. EPSS: 19.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.

Affected products

• HP Power Manager: up to and including 4.2.9; version 4.2.5 only; version 4.2.6 only; version 4.2.7 only; version 4.2.8 only

Published 2010-01-20. Last modified 2026-06-16.