HP Operations Agent vulnerabilities

10 CVEs affecting HP Operations Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-3733, published 2017-05-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-2020, published 2012-07-11. High severity, CVSS 10.0. EPSS: 64.7% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326.
CVE-2012-2019, published 2012-07-11. High severity, CVSS 10.0. EPSS: 63.9% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325.
CVE-2017-3733, published 2017-05-04. High severity, CVSS 7.5. EPSS: 12.9% chance of exploitation in the next 30 days. During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash…
CVE-2010-0444, published 2010-02-09. High severity, CVSS 10.0. EPSS: 8.6% chance of exploitation in the next 30 days. HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2014-2630, published 2014-08-12. Medium severity, CVSS 4.4. EPSS: 7.1% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors.
CVE-2010-3004, published 2010-09-08. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2011-2608, published 2011-07-01. Medium severity, CVSS 6.4. EPSS: 4.8% chance of exploitation in the next 30 days. ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers…
CVE-2014-2647, published 2014-10-19. Medium severity, CVSS 4.3. EPSS: 3.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager (formerly OpenView Communications Broker) before 11.14 allows remote attackers to inject arbitrary web script…
CVE-2011-4160, published 2011-11-24. Low severity, CVSS 3.2. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via…
CVE-2010-3005, published 2010-09-08. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows local users to gain privileges via unknown vectors.