HP Icewall Mcrp vulnerabilities

5 CVEs affecting HP Icewall Mcrp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8978, published 2018-02-15.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-2182, published 2016-09-16. Critical severity, CVSS 9.8. EPSS: 46.1% chance of exploitation in the next 30 days. The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and…
• CVE-2016-2177, published 2016-06-20. Critical severity, CVSS 9.8. EPSS: 44.5% chance of exploitation in the next 30 days. OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or…
• CVE-2016-6306, published 2016-09-26. Medium severity, CVSS 5.9. EPSS: 41.7% chance of exploitation in the next 30 days. The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to…
• CVE-2014-2604, published 2014-05-22. Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days. Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors.
• CVE-2017-8978, published 2018-02-15. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found.