HP : Security Vulnerabilities, CVEs, Published In 2012
CVE-2012-4361
Public exploit
lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter.
Max CVSS
7.7
EPSS Score
16.61%
Published
2012-08-20
Updated
2012-08-21
CVE-2012-3274
Public exploit
Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data.
Max CVSS
10.0
EPSS Score
87.52%
Published
2012-12-06
Updated
2019-10-09
CVE-2012-3261
Public exploit
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.
Max CVSS
10.0
EPSS Score
10.72%
Published
2012-09-25
Updated
2019-10-09
CVE-2012-3260
Public exploit
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.
Max CVSS
10.0
EPSS Score
10.72%
Published
2012-09-25
Updated
2019-10-09
CVE-2012-2020
Public exploit
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326.
Max CVSS
10.0
EPSS Score
94.95%
Published
2012-07-11
Updated
2019-10-09
CVE-2012-2019
Public exploit
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325.
Max CVSS
10.0
EPSS Score
94.95%
Published
2012-07-11
Updated
2019-10-09
CVE-2012-0124
Public exploit
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
Max CVSS
10.0
EPSS Score
92.85%
Published
2012-03-14
Updated
2019-10-09
CVE-2011-4789
Public exploit
Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the vulnerable product is actually HP LoadRunner."
Max CVSS
10.0
EPSS Score
85.35%
Published
2012-01-13
Updated
2012-11-28
CVE-2011-4786
Public exploit
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787.
Max CVSS
9.3
EPSS Score
93.81%
Published
2012-01-12
Updated
2019-10-09
9 vulnerabilities found