HP Mercury Quality Center vulnerabilities

3 CVEs affecting HP Mercury Quality Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-5289, published 2009-02-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-1819, published 2007-04-02. High severity, CVSS 9.3. EPSS: 39.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32,…
CVE-2007-5289, published 2009-02-24. High severity, CVSS 7.6. EPSS: 8.7% chance of exploitation in the next 30 days. HP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached client-side scripts to implement "workflow" and decisions about the "capability" of a user, which allows…
CVE-2007-1882, published 2007-04-06. Medium severity, CVSS 6.5. EPSS: 6.1% chance of exploitation in the next 30 days. qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authenticated users to execute arbitrary SQL commands via the RunQuery method.