PT-2013-3701 · Hewlett Packard · Hp Business Process Monitor

Published 2013-10-13 · Updated 2019-10-09 · CVE-2013-2366

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Business Process Monitor versions 9.13.1 patch 1 through 9.22 patch 1

Description The issue allows remote attackers to execute arbitrary code and obtain sensitive information. The exact vectors used for the attack are not specified.

Recommendations For HP Business Process Monitor versions 9.13.1 patch 1 through 9.22 patch 1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2013-2366

ZDI-13-257

Affected Products

Hp Business Process Monitor

References · 3

• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03844594 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-13-257 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-2366 · Security Note