HP : Security Vulnerabilities, CVEs, Published In December 2013 (Code Execution)
upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.
Max CVSS
6.8
EPSS Score
0.54%
Published
2013-12-09
Updated
2014-03-06
Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors.
Max CVSS
5.2
EPSS Score
0.42%
Published
2013-12-29
Updated
2017-08-29
Unspecified vulnerability in the Archive Query Server in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4, and 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1666.
Max CVSS
10.0
EPSS Score
92.60%
Published
2013-12-29
Updated
2019-10-09
3 vulnerabilities found