HP Software Update vulnerabilities

4 CVEs affecting HP Software Update, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-5442, published 2015-09-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-6506, published 2007-12-20. High severity, CVSS 9.3. EPSS: 16.3% chance of exploitation in the next 30 days. The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to (1) overwrite and corrupt…
CVE-2008-2390, published 2008-05-21. Medium severity, CVSS 6.8. EPSS: 6.9% chance of exploitation in the next 30 days. Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows remote attackers to execute arbitrary code via an absolute pathname in the…
CVE-2008-0712, published 2008-04-25. Medium severity, CVSS 6.8. EPSS: 4.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code…
CVE-2015-5442, published 2015-09-29. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Software Update before 5.005.002.002 allows local users to gain privileges via unknown vectors.