Read the docs

Hewlett Packard Enterprise

Records2515All Threatist records
Exploited (KEV)7In CISA KEV
CVSS critical598CVSS 9.0–10.0
CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Data Protector · all components

Priority MEDIUM 56

crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.11333 Published 2011-02-09 No fix listed CWE-20
Priority MEDIUM 54

Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files vi…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.34765 Published 2014-08-01 No fix listed CWE-22
Priority MEDIUM 50

The client in HP Data Protector does not verify the contents of files associated with the EXEC_CMD command, which allows remote attackers to execute arbitrary script code by providing this code with a trusted filename, a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04625 Published 2011-02-09 No fix listed CWE-20
Open these records in search →