CVE-2013-4813: HP Identity Driven Manager

High severity, CVSS 10.0. EPSS: 8.5% chance of exploitation in the next 30 days.

The Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allows remote attackers to execute arbitrary commands via a HEAD request, aka ZDI-CAN-1745.

Affected products

• HP Identity Driven Manager: version 4.0 only
• HP ProCurve Manager: version 3.20 only; version 4.0 only

Published 2013-09-16. Last modified 2026-06-16.