HP Apollo Domain OS vulnerabilities

2 CVEs affecting HP Apollo Domain OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-1999-1493, published 1991-12-18.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-1999-1493, published 1991-12-18. High severity, CVSS 10.0. EPSS: 5.5% chance of exploitation in the next 30 days. Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure system calls, (1) pad_$dm_cmd and (2) pad_$def_pfk().
• CVE-1999-1115, published 1990-12-31. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the /etc/suid_exec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell (ksh).