HP Thinpro Linux vulnerabilities

3 CVEs affecting HP Thinpro Linux, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-16286, published 2019-11-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-16285, published 2019-11-22. Medium severity, CVSS 4.6. EPSS: 1% chance of exploitation in the next 30 days. If a local user has been configured and logged in, an unauthenticated attacker with physical access may be able to extract sensitive information onto a local drive.
CVE-2019-16286, published 2019-11-22. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. An attacker may be able to bypass the OS application filter meant to restrict applications that can be executed by changing browser preferences to launch a separate process that in turn can execute…
CVE-2015-2124, published 2015-06-05. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero Core 4.3 and 4.4 allows local users to bypass intended access restrictions and gain privileges via…