HP Virtual Connect Enterprise Manager vulnerabilities

3 CVEs affecting HP Virtual Connect Enterprise Manager, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3113, published 2015-06-23.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-3113: Adobe Flash Player Heap-Based Buffer Overflow Vulnerability, published 2015-06-23. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-04-13. EPSS: 99.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute…
• CVE-2010-3986, published 2010-10-26. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Virtual Connect Enterprise Manager (VCEM) 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors.
• CVE-2010-1969, published 2010-07-22. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in HP Virtual Connect Enterprise Manager for Windows before 6.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.