HP Virtual Customer Access System vulnerabilities

2 CVEs affecting HP Virtual Customer Access System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-0778, published 2016-01-14.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-0778, published 2016-01-14. High severity, CVSS 8.1. EPSS: 20.9% chance of exploitation in the next 30 days. The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly…
• CVE-2015-3200, published 2015-06-09. High severity, CVSS 7.5. EPSS: 9.9% chance of exploitation in the next 30 days. mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a string containing a…