HP Icewall Identity Manager vulnerabilities

2 CVEs affecting HP Icewall Identity Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-3092, published 2016-07-04.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-3092, published 2016-07-04. High severity, CVSS 7.5. EPSS: 37.2% chance of exploitation in the next 30 days. The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products,…
• CVE-2014-2600, published 2014-04-05. Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users…