HP » Application Lifecycle Management : Security Vulnerabilities, CVEs,
Unspecified vulnerability in HP Application Lifecycle Management (aka Quality Center) 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138.
Max CVSS
4.6
EPSS Score
23.98%
Published
2014-08-12
Updated
2017-01-07
Unspecified vulnerability in the client component in HP Application LifeCycle Management (ALM) before 11 p11 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1327.
Max CVSS
7.5
EPSS Score
0.76%
Published
2013-11-04
Updated
2019-10-09
CVE-2013-4810
Known exploited
HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet, aka ZDI-CAN-1760. NOTE: this is probably a duplicate of CVE-2007-1036, CVE-2010-0738, and/or CVE-2012-0874.
Max CVSS
10.0
EPSS Score
91.46%
Published
2013-09-16
Updated
2017-10-05
CISA KEV Added
2022-03-25
Cross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality Center before 11.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka ZDI-CAN-1565.
Max CVSS
4.3
EPSS Score
0.29%
Published
2013-07-29
Updated
2017-08-29
4 vulnerabilities found