HP Service Center vulnerabilities

12 CVEs affecting HP Service Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4844, published 2013-11-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-4844, published 2013-11-29. High severity, CVSS 7.5. EPSS: 5.5% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2013-4808, published 2013-08-18. High severity, CVSS 10.0. EPSS: 4.4% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31 and Service Center 6.2.8 allows remote attackers to obtain privileged access via unknown vectors.
CVE-2012-5214, published 2013-03-09. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in HP ServiceCenter 6.2.8 before 6.2.8.10 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
CVE-2011-1860, published 2011-06-14. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors.
CVE-2011-1859, published 2011-06-14. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to obtain sensitive information via unknown vectors.
CVE-2011-1861, published 2011-06-14. High severity, CVSS 8.3. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to modify data or obtain sensitive information via unknown vectors.
CVE-2013-2336, published 2013-06-14. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2011-1862, published 2011-06-14. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2013-2337, published 2013-06-14. Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2011-1857, published 2011-06-14. High severity, CVSS 8.2. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote authenticated users to bypass intended access restrictions via unknown vectors.

Latest

CVE-2011-1863, published 2011-06-14. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allow remote authenticated users to conduct unspecified script injection attacks via unknown vectors.