HP Onboard Administrator vulnerabilities

5 CVEs affecting HP Onboard Administrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7132, published 2020-04-23.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-0129, published 2012-04-05. High severity, CVSS 7.6. EPSS: 8.5% chance of exploitation in the next 30 days. HP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors.
• CVE-2012-0130, published 2012-04-05. Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days. HP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive information via unspecified vectors.
• CVE-2012-0128, published 2012-04-05. Medium severity, CVSS 5.8. EPSS: 3% chance of exploitation in the next 30 days. HP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
• CVE-2011-3155, published 2011-10-12. Medium severity, CVSS 6.4. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Onboard Administrator (OA) 3.21 through 3.31 allows remote attackers to bypass intended access restrictions via unknown vectors.
• CVE-2020-7132, published 2020-04-23. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow Reflected Cross Site Scripting. HPE has made the following…