HP Insight Software Installer vulnerabilities

4 CVEs affecting HP Insight Software Installer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-1971, published 2010-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-1971, published 2010-07-15. Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown…
CVE-2010-1968, published 2010-07-15. Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown…
CVE-2010-1967, published 2010-07-15. Low severity, CVSS 3.6. EPSS: 0.5% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data via unknown vectors.
CVE-2010-1970, published 2010-07-15. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data, and consequently gain privileges, via unknown vectors.