CVE-2016-2004: HP Data Protector

Critical severity, CVSS 9.8. EPSS: 94.3% chance of exploitation in the next 30 days.

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.

Affected products

• HP Data Protector: from 7.0, before 7.03_108 (fixed in 7.03_108); from 8.0, before 8.15 (fixed in 8.15); from 9.0, before 9.06 (fixed in 9.06)

Published 2016-04-21. Last modified 2026-06-17.