HP Asset Manager Cloudsystem Chargeback vulnerabilities

2 CVEs affecting HP Asset Manager Cloudsystem Chargeback, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-2802, published 2020-02-04.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-2802, published 2020-02-04. High severity, CVSS 7.5. EPSS: 6.4% chance of exploitation in the next 30 days. An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem…
• CVE-2016-2000, published 2016-04-05. Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days. HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache…