HP Sitescope vulnerabilities

23 CVEs affecting HP Sitescope, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-2802, published 2020-02-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-4835, published 2013-11-04. High severity, CVSS 7.5. EPSS: 71% chance of exploitation in the next 30 days. The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd…
CVE-2013-2367, published 2013-07-31. High severity, CVSS 10.0. EPSS: 68.9% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678.
CVE-2012-3259, published 2012-09-25. High severity, CVSS 10.0. EPSS: 60.2% chance of exploitation in the next 30 days. Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461.
CVE-2012-3261, published 2012-09-25. High severity, CVSS 10.0. EPSS: 40.2% chance of exploitation in the next 30 days. Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.
CVE-2012-3260, published 2012-09-25. High severity, CVSS 10.0. EPSS: 40.2% chance of exploitation in the next 30 days. Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.
CVE-2012-3263, published 2012-09-25. High severity, CVSS 10.0. EPSS: 8.6% chance of exploitation in the next 30 days. Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465.
CVE-2012-3262, published 2012-09-25. High severity, CVSS 10.0. EPSS: 8.6% chance of exploitation in the next 30 days. Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464.
CVE-2015-2802, published 2020-02-04. High severity, CVSS 7.5. EPSS: 6.4% chance of exploitation in the next 30 days. An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem…
CVE-2012-3264, published 2012-09-25. High severity, CVSS 7.5. EPSS: 5.6% chance of exploitation in the next 30 days. Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472.
CVE-2014-2614, published 2014-07-07. High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days. Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24 allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-2140.

Latest

CVE-2017-8952, published 2018-02-15. High severity, CVSS 7.5. EPSS: 4.8% chance of exploitation in the next 30 days. A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.
CVE-2017-8951, published 2018-02-15. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.
CVE-2017-8950, published 2018-02-15. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.
CVE-2017-8949, published 2018-02-15. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.
CVE-2017-14349, published 2017-09-30. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data.
CVE-2015-2120, published 2015-05-25. High severity, CVSS 8.7. EPSS: 3.5% chance of exploitation in the next 30 days. Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka…
CVE-2014-7882, published 2015-02-02. Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in HP SiteScope 11.1x and 11.2x allows remote authenticated users to gain privileges via unknown vectors.
CVE-2013-6207, published 2014-03-11. High severity, CVSS 9.4. EPSS: 3.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the loadFileContents function in the SOAP implementation in HP SiteScope 10.1x, 11.1x, and 11.21 allows remote attackers to read arbitrary files or cause a denial of…