Priority CRITICAL 86
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.94251 · Published 2016-04-21 · No fix listed CWE-306
Priority HIGH 83
The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.81081 · Published 2011-02-09 · No fix listed CWE-20
Priority HIGH 78
The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.64219 · Published 2011-02-09 · No fix listed CWE-20
Priority MEDIUM 62
A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.21906 · Published 2018-02-15 · No fix listed CWE-119
Priority MEDIUM 61
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20412 · Published 2016-04-21 · No fix listed
Priority MEDIUM 61
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3353.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20412 · Published 2016-04-21 · No fix listed
Priority MEDIUM 61
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20412 · Published 2016-04-21 · No fix listed
Priority MEDIUM 56
crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.11333 · Published 2011-02-09 · No fix listed CWE-20
Priority MEDIUM 55
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.10482 · Published 2016-04-21 · No fix listed
Priority MEDIUM 54
Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files vi…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.34765 · Published 2014-08-01 · No fix listed CWE-22
Priority MEDIUM 50
The client in HP Data Protector does not verify the contents of files associated with the EXEC_CMD command, which allows remote attackers to execute arbitrary script code by providing this code with a trusted filename, a…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04625 · Published 2011-02-09 · No fix listed CWE-20
Priority MEDIUM 49
A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.16066 · Published 2018-02-15 · No fix listed CWE-20
Priority MEDIUM 41
Unspecified vulnerability in the Media Management Daemon (mmd) in HP Data Protector 6.11 and earlier allows remote attackers to cause a denial of service via unknown vectors.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.04549 · Published 2011-08-01 · No fix listed
Priority LOW 28
A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01583 · Published 2018-02-15 · No fix listed CWE-275