HP Centralview Fraud Risk Management vulnerabilities

8 CVEs affecting HP Centralview Fraud Risk Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7070, published 2018-08-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-8992, published 2018-08-06. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent…
CVE-2015-5406, published 2015-08-22. High severity, CVSS 9.0. EPSS: 2.1% chance of exploitation in the next 30 days. HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Performance Audit 2.0 and 2.1; CentralView Credit Risk Control…
CVE-2018-7070, published 2018-08-06. Medium severity, CVSS 5.3. EPSS: 1.9% chance of exploitation in the next 30 days. HPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent…
CVE-2018-7069, published 2018-08-06. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or…
CVE-2018-7068, published 2018-08-06. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. HPE has identified a remote HOST header attack vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version.
CVE-2015-5408, published 2015-08-22. Medium severity, CVSS 6.0. EPSS: 0.6% chance of exploitation in the next 30 days. HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Performance Audit 2.0 and 2.1; CentralView Credit Risk Control…
CVE-2015-5407, published 2015-08-22. Medium severity, CVSS 6.0. EPSS: 0.6% chance of exploitation in the next 30 days. HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Performance Audit 2.0 and 2.1; CentralView Credit Risk Control…
CVE-2017-8991, published 2018-08-06. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. HPE has identified a cross site scripting (XSS) vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version.