Vulnerabilities

TI-2017-03747 CVE-2017-5809 · GHSA-3p6v-qx4g-mwhp

A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

LOW 28

A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01583 Published 2018-02-15 No fix listed CWE-275

TI-2017-03746 CVE-2017-5808 · GHSA-wpm6-3cwm-hmf2

A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

MEDIUM 49

A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.16066 Published 2018-02-15 No fix listed CWE-20

TI-2017-03745 CVE-2017-5807 · GHSA-q4rj-xmgp-c99c

A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

MEDIUM 62

A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.21906 Published 2018-02-15 No fix listed CWE-119

TI-2016-01841 CVE-2016-2008 · GHSA-mcp8-rx22-p3vj

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote…

MEDIUM 55

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10482 Published 2016-04-21 No fix listed

TI-2016-01840 CVE-2016-2007 · GHSA-fmm6-c45g-rqwm

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote…

MEDIUM 61

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.20412 Published 2016-04-21 No fix listed

TI-2016-01839 CVE-2016-2006 · GHSA-jj58-9fp6-rq2w

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote…

MEDIUM 61

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3353.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.20412 Published 2016-04-21 No fix listed

TI-2016-01838 CVE-2016-2005 · GHSA-m57c-jjm6-gh89

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote…

MEDIUM 61

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.20412 Published 2016-04-21 No fix listed

TI-2016-01837 CVE-2016-2004 · GHSA-jrq2-fq6q-8g5w

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote…

CRITICAL 86

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.94251 Published 2016-04-21 No fix listed CWE-306

TI-2014-04212 CVE-2014-5160 · GHSA-542w-9rgx-v3rq

Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP…

MEDIUM 54

Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files vi…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.34765 Published 2014-08-01 No fix listed CWE-22

TI-2011-02095 CVE-2011-2399 · GHSA-qjf8-cx54-8r7c

Unspecified vulnerability in the Media Management Daemon (mmd) in HP Data Protector 6.11…

MEDIUM 41

Unspecified vulnerability in the Media Management Daemon (mmd) in HP Data Protector 6.11 and earlier allows remote attackers to cause a denial of service via unknown vectors.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04549 Published 2011-08-01 No fix listed

TI-2011-00818 CVE-2011-0924 · GHSA-cw2v-h2mm-6m7m

The client in HP Data Protector does not verify the contents of files associated with the…

MEDIUM 50

The client in HP Data Protector does not verify the contents of files associated with the EXEC_CMD command, which allows remote attackers to execute arbitrary script code by providing this code with a trusted filename, a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04625 Published 2011-02-09 No fix listed CWE-20

TI-2011-00817 CVE-2011-0923 · GHSA-px66-r9g5-2c75

The client in HP Data Protector does not properly validate EXEC_CMD arguments, which…

HIGH 83

The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.81081 Published 2011-02-09 No fix listed CWE-20

TI-2011-00816 CVE-2011-0922 · GHSA-qfxr-83x7-qjhf

The client in HP Data Protector allows remote attackers to execute arbitrary programs via…

HIGH 78

The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.64219 Published 2011-02-09 No fix listed CWE-20

TI-2011-00815 CVE-2011-0921 · GHSA-j2gx-pvcp-f968

crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly…

MEDIUM 56

crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.11333 Published 2011-02-09 No fix listed CWE-20

Vulnerabilities

Filters