HP Network Virtualization vulnerabilities

3 CVEs affecting HP Network Virtualization, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-2121, published 2015-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-2626, published 2014-07-26. High severity, CVSS 9.4. EPSS: 19.4% chance of exploitation in the next 30 days. Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute…
CVE-2014-2625, published 2014-07-26. High severity, CVSS 8.5. EPSS: 9.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to read arbitrary files via crafted input,…
CVE-2015-2121, published 2015-05-25. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2)…