HP Version Control Agent vulnerabilities

2 CVEs affecting HP Version Control Agent, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3113, published 2015-06-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-3113: Adobe Flash Player Heap-Based Buffer Overflow Vulnerability, published 2015-06-23. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-04-13. EPSS: 99.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute…
CVE-2006-5300, published 2006-10-17. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Version Control Agent before 2.1.5 allows remote authenticated users to obtain "unauthorized access" to a remote Repository Manager account and potentially gain…