HP OpenView Performance Agent vulnerabilities

3 CVEs affecting HP OpenView Performance Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2608, published 2011-07-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-4420, published 2009-04-13. High severity, CVSS 9.3. EPSS: 5.7% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP…
CVE-2011-2608, published 2011-07-01. Medium severity, CVSS 6.4. EPSS: 4.8% chance of exploitation in the next 30 days. ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers…
CVE-2007-4349, published 2008-10-23. Medium severity, CVSS 4.3. EPSS: 3.1% chance of exploitation in the next 30 days. The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70)…