HP Restful Interface Tool vulnerabilities

2 CVEs affecting HP Restful Interface Tool, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8968, published 2018-08-06.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-8968, published 2018-08-06. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 (hprest-1.5-79.x86_64.rpm, ilorest-2.0-403.x86_64.rpm). The issue is resolved in iLOREST…
• CVE-2016-2023, published 2016-05-30. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. HPE RESTful Interface Tool 1.40 allows local users to obtain sensitive information via unspecified vectors.