HP Keyview vulnerabilities

16 CVEs affecting HP Keyview, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4404, published 2018-08-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-4402, published 2018-08-06. Critical severity, CVSS 9.8. EPSS: 14.7% chance of exploitation in the next 30 days. A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via buffer overflow.
CVE-2016-4404, published 2018-08-06. Critical severity, CVSS 9.8. EPSS: 13.2% chance of exploitation in the next 30 days. A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via a memory allocation…
CVE-2016-4403, published 2018-08-06. Critical severity, CVSS 9.8. EPSS: 12.2% chance of exploitation in the next 30 days. A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via memory corruption.
CVE-2015-5416, published 2015-08-24. High severity, CVSS 7.5. EPSS: 11.3% chance of exploitation in the next 30 days. Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2875.
CVE-2015-5424, published 2015-08-24. High severity, CVSS 7.5. EPSS: 10.7% chance of exploitation in the next 30 days. Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2885.
CVE-2015-5423, published 2015-08-24. High severity, CVSS 7.5. EPSS: 10.7% chance of exploitation in the next 30 days. Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2884.
CVE-2015-5422, published 2015-08-24. High severity, CVSS 7.5. EPSS: 10.7% chance of exploitation in the next 30 days. Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2883.
CVE-2015-5421, published 2015-08-24. High severity, CVSS 7.5. EPSS: 10.7% chance of exploitation in the next 30 days. Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2881.
CVE-2015-5420, published 2015-08-24. High severity, CVSS 7.5. EPSS: 10.7% chance of exploitation in the next 30 days. Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2880.
CVE-2015-5419, published 2015-08-24. High severity, CVSS 7.5. EPSS: 10.7% chance of exploitation in the next 30 days. Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2879.

Latest

CVE-2016-4390, published 2016-10-05. High severity, CVSS 8.1. EPSS: 5.1% chance of exploitation in the next 30 days. The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and…
CVE-2016-4389, published 2016-10-05. High severity, CVSS 8.1. EPSS: 5.1% chance of exploitation in the next 30 days. The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and…
CVE-2016-4388, published 2016-10-05. High severity, CVSS 8.1. EPSS: 5.1% chance of exploitation in the next 30 days. The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4389, and…
CVE-2016-4387, published 2016-10-05. High severity, CVSS 8.1. EPSS: 8.5% chance of exploitation in the next 30 days. The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4388, CVE-2016-4389, and…