VendorsHPuniversal_configuration_management_databaseall versions
Vulnerabilities

HP Universal Configuration Management Database

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2014-2617
Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2104.
Published 2014-07-07 · Modified
10.0EPSS 0.122
CVE-2013-6215
Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors, aka ZDI-CAN-1977.
Published 2014-04-19 · Modified
8.5EPSS 0.026
CVE-2014-2615
Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2083.
Published 2014-07-07 · Modified
7.5EPSS 0.081
CVE-2014-2616
Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2091.
Published 2014-07-07 · Modified
7.5EPSS 0.081
CVE-2014-7883
HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.
Published 2015-02-15 · Modified
5.01 PoCEPSS 0.370
CVE-2015-5440
HP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before 10.11CUP6, and 10.2x before 10.21 allows local users to obtain sensitive information via unspecified vectors.
Published 2015-09-16 · Modified
4.9EPSS 0.006
CVE-2013-6214
Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via unknown vectors, aka ZDI-CAN-2042.
Published 2014-04-19 · Modified
4.0EPSS 0.012