Vulnerabilities
Summary — last 7 days
New vulnerabilities3,081▲ 625 vs. last week
Critical / high1,483▲ 317 vs. last week
New active exploitation (KEV)5▼ 5 vs. last week
Unscored (no CVSS)393▲ 186 vs. last week
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (10) | 8.5% | — | HP Identity Driven ManagerHP Procurve Manager | 9/16/2013 | 6/16/2026 | The Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allows remote attackers to execute arbitrary commands via a HEAD request, aka ZDI-CAN-1745. | |
| Modified | High (10) | 52% | — | HP Identity Driven ManagerHP Procurve Manager | 9/16/2013 | 6/16/2026 | UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code via unspecified… | |
| Modified | High (10) | 71% | — | HP Identity Driven ManagerHP Procurve Manager | 9/16/2013 | 6/16/2026 | UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code via unspecified… | |
| Modified | High (7.5) | 3.3% | — | HP Identity Driven ManagerHP Procurve Manager | 9/16/2013 | 6/16/2026 | Multiple SQL injection vulnerabilities in GetEventsServlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter. | |
| Modified | Medium (6.8) | 0.28% | — | HP Procurve Identity Driven Manager | 9/29/2009 | 6/16/2026 | Unspecified vulnerability in HP ProCurve Identity Driven Manager (IDM) A.02.x through A.02.03 and A.03.x through A.03.00, on Windows Server 2003 with IAS and Windows Server 2008 with NPS, allows local users to gain privileges via unknown vectors. |