HP Identity Driven Manager vulnerabilities

4 CVEs affecting HP Identity Driven Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4813, published 2013-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-4811, published 2013-09-16. High severity, CVSS 10.0. EPSS: 71.3% chance of exploitation in the next 30 days. UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert…
CVE-2013-4812, published 2013-09-16. High severity, CVSS 10.0. EPSS: 51.9% chance of exploitation in the next 30 days. UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName…
CVE-2013-4813, published 2013-09-16. High severity, CVSS 10.0. EPSS: 8.5% chance of exploitation in the next 30 days. The Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allows remote attackers to execute arbitrary commands via a…
CVE-2013-4809, published 2013-09-16. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in GetEventsServlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allow remote attackers to execute…