← Back

Hp

hp

2,335 CVEs • 17,248 products

Products (17,248)

Click to collapse
Toggle
Hp Ux
hp-ux
Instantos
instantos
Tru64
tru64
Loadrunner
loadrunner
Sitescope
sitescope
Openvms
openvms
Oneview
oneview

CVEs (2,335)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Hp
1Network Automation
Apr 29, 2026
Feb 2, 2012
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors.
1Hp
1Storageworks P2000 G3 Msa
Apr 29, 2026
Jan 13, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via unspecified vectors, a different vulnerability than CVE-2011-4788.
1Hp
1Diagnostics
Apr 29, 2026
Jan 13, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally report...Show more
Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the vulnerable product is actually HP LoadRunner."Show less
1Hp
3Storageworks P2000 G3 Msa Fc/iscsi Dual Combo Controller Lff Array System
Storageworks P2000 G3 Msa Fibre Channel Dual Controller Lff Array SystemStorageworks P2000 G3 Msa Fibre Channel Dual Controller Sff Array System
Apr 29, 2026
Jan 13, 2012
N/A· v4
N/A· v3
7.8 HIGH· v2
Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI.
1Hp
1Easy Printer Care Software
Apr 29, 2026
Jan 12, 2012
N/A· v4
N/A· v3
9.3 HIGH· v2
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vect...Show more
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4786.Show less
1Hp
1Easy Printer Care Software
Apr 29, 2026
Jan 12, 2012
N/A· v4
N/A· v3
9.3 HIGH· v2
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vect...Show more
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787.Show less
1Hp
1Hp Chaisoe
Apr 29, 2026
Jan 10, 2012
N/A· v4
N/A· v3
7.8 HIGH· v2
Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 printer with firmware 07.006.0, and LaserJet 2430 printer with firmware 08....Show more
Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 printer with firmware 07.006.0, and LaserJet 2430 printer with firmware 08.113.0_I35128 allows remote attackers to read arbitrary files via unspecified vectors, a different vulnerability than CVE-2008-4419.Show less
1Hp
1Database Archiving Software
Apr 29, 2026
Dec 29, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1263.
1Hp
1Database Archiving Software
Apr 29, 2026
Dec 29, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1214.
1Hp
1Database Archiving Software
Apr 29, 2026
Dec 29, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1213.
1Hp
1Managed Printing Administration
Apr 29, 2026
Dec 27, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in HP Managed Printing Administration before 2.6.4 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
1Hp
1Managed Printing Administration
Apr 29, 2026
Dec 27, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Directory traversal vulnerability in hpmpa/jobDelivery/Default.asp in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.
1Hp
1Managed Printing Administration
Apr 29, 2026
Dec 27, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp.
1Hp
1Managed Printing Administration
Apr 29, 2026
Dec 27, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.
1Hp
1Application Lifestyle Management
Apr 29, 2026
Dec 15, 2011
N/A· v4
N/A· v3
4.6 MEDIUM· v2
The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2)...Show more
The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt.Show less
1Hp
1Protecttools Device Access Manager
Apr 29, 2026
Dec 5, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to exe...Show more
The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a long SidString argument.Show less
1Hp
41Color Laserjet 3000
Color Laserjet 3800Color Laserjet 4700+38 more
Apr 29, 2026
Dec 1, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxx...Show more
The default configuration of the HP CM8060 Color MFP with Edgeline; Color LaserJet 3xxx, 4xxx, 5550, 9500, CMxxxx, CPxxxx, and Enterprise CPxxxx; Digital Sender 9200c and 9250c; LaserJet 4xxx, 5200, 90xx, Mxxxx, and Pxxxx; and LaserJet Enterprise 500 color M551, 600, M4555 MFP, and P3015 enables the Remote Firmware Update (RFU) setting, which allows remote attackers to execute arbitrary code by using a session on TCP port 9100 to upload a crafted firmware update.Show less
1Hp
2Operations Agent
Performance Agent
Apr 29, 2026
Nov 24, 2011
N/A· v4
N/A· v3
3.2 LOW· v2
Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors.
1Hp
1Event Monitoring Service
Apr 29, 2026
Nov 19, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in System Administration Manager (SAM) in EMS before A.04.20.11.04_01 on HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors.
1Hp
1Network Node Manager I
Apr 29, 2026
Nov 16, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4...Show more
Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4155.Show less