HP Network Node Manager vulnerabilities

4 CVEs affecting HP Network Node Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0445, published 2010-02-11.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-0920, published 2009-03-25. High severity, CVSS 7.5. EPSS: 74.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a…
• CVE-2009-0921, published 2009-03-25. High severity, CVSS 10.0. EPSS: 13.2% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long…
• CVE-2010-0445, published 2010-02-11. High severity, CVSS 10.0. EPSS: 6.2% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Network Node Manager (NNM) 8.10, 8.11, 8.12, and 8.13 allows remote attackers to execute arbitrary commands via unknown vectors.
• CVE-2007-0819, published 2007-02-08. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. HP Network Node Manager (NNM) Remote Console 7.50, 7.51, and 7.53 assigns Everyone Full Control permission for the %PROGRAMFILES%\HP OpenView directory tree, which allows local users to gain…