HP Icewall SSO vulnerabilities
7 CVEs affecting HP Icewall SSO, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8989, published 2018-08-06.
More from HP.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2016-2182, published 2016-09-16. Critical severity, CVSS 9.8. EPSS: 46.1% chance of exploitation in the next 30 days. The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and…
- CVE-2016-2177, published 2016-06-20. Critical severity, CVSS 9.8. EPSS: 44.5% chance of exploitation in the next 30 days. OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or…
- CVE-2016-6306, published 2016-09-26. Medium severity, CVSS 5.9. EPSS: 41.7% chance of exploitation in the next 30 days. The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to…
- CVE-2015-3196, published 2015-12-06. Medium severity, CVSS 4.3. EPSS: 13.5% chance of exploitation in the next 30 days. ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which…
- CVE-2014-2604, published 2014-05-22. Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days. Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and IceWall MCRP 2.1 and 3.0 allows remote attackers to cause a denial of service via unknown vectors.
- CVE-2017-8989, published 2018-08-06. Critical severity, CVSS 9.1. EPSS: 1.8% chance of exploitation in the next 30 days. A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection.
- CVE-2017-8978, published 2018-02-15. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found.