HP Nonstop Server vulnerabilities

5 CVEs affecting HP Nonstop Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-3280, published 2013-02-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-2411, published 2011-10-02. High severity, CVSS 9.0. EPSS: 6% chance of exploitation in the next 30 days. Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute arbitrary code via…
CVE-2009-2678, published 2009-11-13. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Open System Services (OSS) Name Server on HP NonStop G06.27, G06.28, G06.29, G06.30, H06.06, H06.07, H06.08, and J06.03 allows remote attackers to obtain sensitive…
CVE-2012-3280, published 2013-02-13. Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via an OSS…
CVE-2006-5704, published 2006-11-04. Medium severity, CVSS 6.2. EPSS: 0.5% chance of exploitation in the next 30 days. HP NonStop Server G06.29, when running Standard Security T6533G06 before T6533G06^ABK, does not properly evaluate access permissions to OSS directories when no optional ACL entry exists, which allows…
CVE-2009-2686, published 2009-12-02. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a denial of service, or…