HP Power Manager vulnerabilities
6 CVEs affecting HP Power Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0280, published 2011-03-14.
More from HP.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2009-2685, published 2009-11-06. High severity, CVSS 10.0. EPSS: 76.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.
- CVE-2009-3999, published 2010-01-20. High severity, CVSS 10.0. EPSS: 71.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter.
- CVE-2009-4000, published 2010-01-20. High severity, CVSS 10.0. EPSS: 19.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory…
- CVE-2010-4113, published 2010-12-22. High severity, CVSS 9.3. EPSS: 9.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via a long Login variable to the management web server.
- CVE-2011-0280, published 2011-03-14. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in HP Power Manager (HPPM) 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the logType parameter to…
- CVE-2011-0277, published 2011-02-09. Medium severity, CVSS 6.8. EPSS: 1.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new…