CVE-2010-0447

critical HPE
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
6.2%
Exploitation probability in 30 days
Top 9% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: March 10, 2010 (5909 days ago)
Last Modified: April 29, 2026
Vendor: HPE
Source: NVD

Description

The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.

CWE

CWE-287

Affected Products

hp openview performance insight

References

🔗 marc.info 🔗 osvdb.org 🔗 secunia.com 🔗 www.securityfocus.com 🔗 www.securityfocus.com