HP Universal Configuration Management Database vulnerabilities

7 CVEs affecting HP Universal Configuration Management Database, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-5440, published 2015-09-16.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-7883, published 2015-02-15. Medium severity, CVSS 5.0. EPSS: 37% chance of exploitation in the next 30 days. HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.
• CVE-2014-2617, published 2014-07-07. High severity, CVSS 10.0. EPSS: 12.2% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2104.
• CVE-2014-2616, published 2014-07-07. High severity, CVSS 7.5. EPSS: 8.1% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2091.
• CVE-2014-2615, published 2014-07-07. High severity, CVSS 7.5. EPSS: 8.1% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2083.
• CVE-2013-6215, published 2014-04-19. High severity, CVSS 8.5. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors,…
• CVE-2013-6214, published 2014-04-19. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via…
• CVE-2015-5440, published 2015-09-16. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. HP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before 10.11CUP6, and 10.2x before 10.21 allows local users to obtain sensitive information via unspecified vectors.