HP
HP Data Protector: vulnerabilidades y CVE
HP Data Protector tiene 14 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses0
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2017-5809 | Media (5.5) | 1.6% | — | 15 feb 2018 | A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found. |
| CVE-2017-5808 | Alta (7.5) | 16% | — | 15 feb 2018 | A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found. |
| CVE-2017-5807 | Crítica (9.8) | 22% | — | 15 feb 2018 | A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found. |
| CVE-2016-2008 | Crítica (9.8) | 10% | — | 21 abr 2016 | HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors. |
| CVE-2016-2007 | Crítica (9.8) | 20% | — | 21 abr 2016 | HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354. |
| CVE-2016-2006 | Crítica (9.8) | 20% | — | 21 abr 2016 | HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3353. |
| CVE-2016-2005 | Crítica (9.8) | 20% | — | 21 abr 2016 | HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352. |
| CVE-2016-2004 | Crítica (9.8) | 94% | — | 21 abr 2016 | HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists… |
| CVE-2014-5160 | Media (6.4) | 35% | — | 1 ago 2014 | Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files… |
| CVE-2011-2399 | Alta (7.8) | 4.5% | — | 1 ago 2011 | Unspecified vulnerability in the Media Management Daemon (mmd) in HP Data Protector 6.11 and earlier allows remote attackers to cause a denial of service via unknown vectors. |
| CVE-2011-0924 | Alta (10) | 4.6% | — | 9 feb 2011 | The client in HP Data Protector does not verify the contents of files associated with the EXEC_CMD command, which allows remote attackers to execute arbitrary script code by providing this code with a trusted filename,… |
| CVE-2011-0923 | Alta (10) | 81% | — | 9 feb 2011 | The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory." |
| CVE-2011-0922 | Alta (10) | 64% | — | 9 feb 2011 | The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname. |
| CVE-2011-0921 | Alta (10) | 11% | — | 9 feb 2011 | crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code… |