HP XP 9000 Command View vulnerabilities

4 CVEs affecting HP XP 9000 Command View, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7091, published 2018-08-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-4378, published 2016-08-26. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. The (1) Device Manager, (2) Tiered Storage Manager, (3) Replication Manager, (4) Replication Monitor, and (5) Hitachi Automation Director (HAD) components in HPE XP P9000 Command View Advanced…
CVE-2013-4814, published 2013-09-23. Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-02 allows remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2018-7091, published 2018-08-06. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. HPE XP P9000 Command View Advanced Edition Software (CVAE) has open URL redirection vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr.
CVE-2018-7090, published 2018-08-06. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. HPE XP P9000 Command View Advanced Edition Software (CVAE) has local and remote cross site scripting vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr.