CVE-2013-4809: HP Identity Driven Manager

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in GetEventsServlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter.

Affected products

• HP Identity Driven Manager: version 4.0 only
• HP ProCurve Manager: version 3.20 only; version 4.0 only

Published 2013-09-16. Last modified 2026-06-16.