CVE-2025-43017

Published: Oct 28, 2025Modified: Jun 17, 2026

8.5

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: hp-security-alert@hp.com (Secondary)

Description

HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.

Affected (6)

Products: Hp: Thinpro

1 product

Thinpro

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Hp Thinpro	Version 8.1 sp2
Hp Thinpro	Version 8.1 sp3
Hp Thinpro	Version 8.1 sp4
Hp Thinpro	Version 8.1 sp5
Hp Thinpro	Version 8.1 sp6
Hp Thinpro	Version 8.1 sp7

Related CWEs

CWE-250

Execution with Unnecessary Privileges

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

References (1)

https://support.hp.com/us-en/document/ish_13164593-13164617-16/hpsbhf04066

Source: hp-security-alert@hp.com

Vendor Advisory

Timeline

No history available yet.