CVE-2008-4559

critical HPE
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
3.5%
Exploitation probability in 30 days
Top 12% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: February 8, 2009 (6303 days ago)
Last Modified: April 23, 2026
Vendor: HPE
Source: NVD

Description

HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the (1) webappmon.exe or (2) OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205.

CWE

CWE-20

Affected Products

hp openview network node manager

References

🔗 h20000.www2.hp.com 🔗 labs.idefense.com 🔗 h20000.www2.hp.com 🔗 labs.idefense.com