HP
HP Thinpro: vulnerabilidades y CVE
HP Thinpro tiene 9 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE9
Últimos 12 meses2
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-43017 | Alta (8.5) | 0.27% | — | 28 oct 2025 | HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities. |
| CVE-2025-43024 | Media (5.1) | 0.28% | — | 28 oct 2025 | A GUI dialog of an application allows to view what files are in the file system without proper authorization. |
| CVE-2024-1174 | Alta (8.2) | 0.18% | — | 1 mar 2024 | Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.0 SP 8, which includes updates to mitigate potential vulnerabilities. |
| CVE-2022-1602 | Media (5.5) | 0.19% | — | 13 sept 2022 | A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8). The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 (SP9). HP has released Service… |
| CVE-2019-18910 | Media (6.8) | 0.65% | — | 22 nov 2019 | The Citrix Receiver wrapper function does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with local user privileges. |
| CVE-2019-18909 | Alta (8) | 2.2% | — | 22 nov 2019 | The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with root privileges. |
| CVE-2019-16287 | Media (6.8) | 0.68% | — | 22 nov 2019 | In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerability to gain privileged access to create a file on the local file system whose presence puts the… |
| CVE-2017-2740 | Alta (7.8) | 0.51% | — | 23 ene 2018 | A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and 4.4. The vulnerability could result in a local unauthorized elevation… |
| CVE-2016-2246 | Alta (7.8) | 0.57% | — | 29 dic 2016 | HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors. |