HP vulnerabilities6 known to be exploited.
HP has 2,474 published vulnerabilities across 17,870 products in our catalogue. 6 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Hp-Ux, with 477. If you run HP software, patch the exploited flaws first.
The most recent HP flaw added to the known-exploited list is CVE-2015-8651, on 25 May 2022. We keep watching the known-exploited list.
Which HP products have the most vulnerabilities?
Hp-Ux leads with 477 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which HP vulnerabilities are being exploited?
6 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8Adobe Flash Player Integer Overflow Vulnerability
Integer overflow in Adobe Flash Player allows attackers to execute code.
- 9.8Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
- 9.8HP OpenView Network Node Manager Remote Code Execution Vulnerability
HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.
- 9.8PHP-CGI Query String Parameter Vulnerability
sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.
- 9.8HP Multiple Products Remote Code Execution Vulnerability
HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2)...
- 9.8Apache Struts Remote Code Execution Vulnerability
Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.
Which HP flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote...
- 96%CVE-2000-0573Critical
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
- 96%CVE-1999-0016Medium
Land IP denial of service.
- 95%CVE-2001-0797Critical
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
- 89%CVE-2011-1865Critical
Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters.
- 87%
Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a ..
- 86%CVE-2003-0085Critical
Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.
- 85%CVE-2003-0201Critical
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
- 82%CVE-2011-0276Critical
HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the...
- 81%CVE-2011-0923Critical
The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."
All HP products we track.
469 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Hp-Uxhp-ux477 vulnerabilities61 versions
- Intelligent Management Centerintelligent_management_center310 vulnerabilities6 versions
- Openview Network Node Manageropenview_network_node_manager80 vulnerabilities17 versions
- System Management Homepagesystem_management_homepage78 vulnerabilities90 versions
- Instantosinstantos56 vulnerabilities119 versions
- Xp7 Command Viewxp7_command_view53 vulnerabilities7 versions
- Systems Insight Managersystems_insight_manager50 vulnerabilities18 versions
- Tru64tru6445 vulnerabilities34 versions
- Matrix Operating Environmentmatrix_operating_environment42 vulnerabilities3 versions
- Network Node Manager Inetwork_node_manager_i29 vulnerabilities25 versions
- Loadrunnerloadrunner28 vulnerabilities24 versions
- Elite X2 G4 Firmwareelite_x2_g4_firmware27 vulnerabilities5 versions
- Elitebook 830 G6 Firmwareelitebook_830_g6_firmware27 vulnerabilities5 versions
- Elitebook 836 G6 Firmwareelitebook_836_g6_firmware27 vulnerabilities5 versions
- Elitebook 840 G6 Firmwareelitebook_840_g6_firmware27 vulnerabilities5 versions
- Elitebook 850 G6 Firmwareelitebook_850_g6_firmware27 vulnerabilities5 versions
- Elitebook X360 1030 G4 Firmwareelitebook_x360_1030_g4_firmware27 vulnerabilities5 versions
- Elitebook X360 1040 G6 Firmwareelitebook_x360_1040_g6_firmware27 vulnerabilities5 versions
- Elitebook X360 830 G6 Firmwareelitebook_x360_830_g6_firmware27 vulnerabilities5 versions
- Probook 640 G5 Firmwareprobook_640_g5_firmware27 vulnerabilities5 versions
- Probook 650 G5 Firmwareprobook_650_g5_firmware27 vulnerabilities5 versions
- Zhan X 13 G2 Firmwarezhan_x_13_g2_firmware27 vulnerabilities5 versions
- Elite Dragonfly Firmwareelite_dragonfly_firmware26 vulnerabilities4 versions
- Elite X2 1013 G3 Firmwareelite_x2_1013_g3_firmware26 vulnerabilities4 versions
This directory lists the 469 HP products with at least one tracked version, of 17,870 in our catalogue.
Running HP? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Integer overflow in Adobe Flash Player allows attackers to execute code.
- Matched to
- HP on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 2,474 published vulnerabilities across 17,870 products and 8,199 versions from HP. The most recent HP flaw added to the known-exploited list is CVE-2015-8651, on 25 May 2022.
6 HP vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2015-8651, CVE-2015-3113 and CVE-2005-2773. The full list is on this page.
Hp-Ux, with 477 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the HP products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.