HP XP p9000 Device Manager vulnerabilities

2 CVEs affecting HP XP p9000 Device Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7077, published 2018-08-14.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-7896, published 2015-03-03. Medium severity, CVSS 4.3. EPSS: 2.5% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Tiered…
• CVE-2018-7077, published 2018-08-14. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), Configuration Manager (CM 8.5.0-00 and prior to 8.6.0-00) could…