HP Device Manager vulnerabilities

5 CVEs affecting HP Device Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-26298, published 2023-06-12.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-26295, published 2023-06-12. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
• CVE-2023-26298, published 2023-06-12. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
• CVE-2023-26297, published 2023-06-12. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
• CVE-2023-26296, published 2023-06-12. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
• CVE-2023-26294, published 2023-06-12. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.