HP Virtualvault vulnerabilities

7 CVEs affecting HP Virtualvault, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-0224, published 2005-01-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0492, published 2004-08-06. High severity, CVSS 10.0. EPSS: 33.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a…
CVE-2004-1082, published 2004-02-03. High severity, CVSS 7.5. EPSS: 7.6% chance of exploitation in the next 30 days. mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
CVE-2001-0606, published 2001-08-22. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.
CVE-2002-1793, published 2002-12-31. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection when the Apache server times out during an SSL request, which may allow attackers…
CVE-2005-0224, published 2005-01-31. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. Unknown vulnerability in HP-UX B.11.04 running Virtualvault 4.5 through 4.7, when running the TGA daemon, allows remote attackers to cause a denial of service via certain network traffic.
CVE-2002-0763, published 2002-08-12. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the…
CVE-2002-1439, published 2003-04-11. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. Unknown vulnerability related to stack corruption in the TGA daemon for HP-UX 11.04 (VVOS) Virtualvault 4.0, 4.5, and 4.6 may allow attackers to obtain access to system files.