HP Version Control Repository Manager vulnerabilities

13 CVEs affecting HP Version Control Repository Manager, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-5787, published 2018-02-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-3113: Adobe Flash Player Heap-Based Buffer Overflow Vulnerability, published 2015-06-23. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-04-13. EPSS: 99.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute…
CVE-2015-8651: Adobe Flash Player Integer Overflow Vulnerability, published 2015-12-28. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 67.7% chance of exploitation in the next 30 days. Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before…
CVE-2010-3994, published 2010-10-28. Medium severity, CVSS 4.3. EPSS: 2.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-5410, published 2015-08-26. Medium severity, CVSS 6.5. EPSS: 2.8% chance of exploitation in the next 30 days. HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of service via unspecified vectors.
CVE-2017-5787, published 2018-02-15. Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days. A remote denial of service vulnerability in HPE Version Control Repository Manager (VCRM) in all versions prior to 7.6 was found.
CVE-2015-5409, published 2015-08-26. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. Buffer overflow in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.
CVE-2015-5411, published 2015-08-26. Medium severity, CVSS 6.8. EPSS: 2.1% chance of exploitation in the next 30 days. HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVE-2016-8515, published 2018-02-15. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.
CVE-2016-8514, published 2018-02-15. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. A remote information disclosure in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.
CVE-2015-5413, published 2015-08-26. Medium severity, CVSS 4.0. EPSS: 1.7% chance of exploitation in the next 30 days. HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to gain privileges and obtain sensitive information via unspecified vectors.

Latest

CVE-2016-8513, published 2018-02-15. High severity, CVSS 8.0. EPSS: 0.7% chance of exploitation in the next 30 days. A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.
CVE-2015-5412, published 2015-08-26. Medium severity, CVSS 6.0. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via…