HP ProCurve Manager vulnerabilities

6 CVEs affecting HP ProCurve Manager, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4813, published 2013-09-16.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-4810: HP Multiple Products Remote Code Execution Vulnerability, published 2013-09-16. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 79.5% chance of exploitation in the next 30 days. HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled…
• CVE-2013-4811, published 2013-09-16. High severity, CVSS 10.0. EPSS: 71.3% chance of exploitation in the next 30 days. UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert…
• CVE-2013-4812, published 2013-09-16. High severity, CVSS 10.0. EPSS: 51.9% chance of exploitation in the next 30 days. UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName…
• CVE-2013-4813, published 2013-09-16. High severity, CVSS 10.0. EPSS: 8.5% chance of exploitation in the next 30 days. The Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allows remote attackers to execute arbitrary commands via a…
• CVE-2013-4809, published 2013-09-16. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in GetEventsServlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allow remote attackers to execute…
• CVE-2007-4514, published 2009-04-15. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in HP ProCurve Manager and HP ProCurve Manager Plus 2.3 and earlier allows remote attackers to obtain sensitive information from the ProCurve Manager server via unknown…