HP Icewall SSO Agent Option vulnerabilities

9 CVEs affecting HP Icewall SSO Agent Option, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6306, published 2016-09-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-2182, published 2016-09-16. Critical severity, CVSS 9.8. EPSS: 46.1% chance of exploitation in the next 30 days. The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and…
CVE-2016-2177, published 2016-06-20. Critical severity, CVSS 9.8. EPSS: 44.5% chance of exploitation in the next 30 days. OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or…
CVE-2016-6306, published 2016-09-26. Medium severity, CVSS 5.9. EPSS: 41.7% chance of exploitation in the next 30 days. The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to…
CVE-2016-3092, published 2016-07-04. High severity, CVSS 7.5. EPSS: 37.2% chance of exploitation in the next 30 days. The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products,…
CVE-2015-3196, published 2015-12-06. Medium severity, CVSS 4.3. EPSS: 13.5% chance of exploitation in the next 30 days. ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which…
CVE-2013-4818, published 2013-09-23. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, and IceWall File Manager 3.0 through SP4 allows remote…
CVE-2013-4817, published 2013-09-23. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote attackers to obtain sensitive information via unknown vectors.
CVE-2013-4820, published 2013-09-23. Low severity, CVSS 2.1. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, IceWall SSO SAML2 Agent Option 8.0, IceWall SSO JAVA…
CVE-2013-4819, published 2013-09-23. Low severity, CVSS 3.5. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote authenticated users to obtain sensitive information via unknown vectors.