HP Insight Control Server Deployment vulnerabilities

8 CVEs affecting HP Insight Control Server Deployment, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4365, published 2016-06-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-4494, published 2010-12-07. High severity, CVSS 7.5. EPSS: 5.9% chance of exploitation in the next 30 days. Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have…
CVE-2016-4365, published 2016-06-08. High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days. HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2013-6206, published 2014-03-14. High severity, CVSS 9.0. EPSS: 3.1% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment allows remote attackers to obtain sensitive information, modify data, or cause a denial of service…
CVE-2016-4362, published 2016-06-08. High severity, CVSS 8.1. EPSS: 2.1% chance of exploitation in the next 30 days. HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
CVE-2016-4363, published 2016-06-08. Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days. HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors.
CVE-2014-7881, published 2015-01-15. Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the server in HP Insight Control allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-4364, published 2016-06-08. High severity, CVSS 8.4. EPSS: 0.7% chance of exploitation in the next 30 days. HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors.
CVE-2013-6205, published 2014-03-14. Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Rapid Deployment Pack (RDP) and Insight Control Server Deployment allows local users to obtain sensitive information, modify data, or cause a denial of service via…