Known vulnerabilities in HP Insight Control

Vendor: Hewlett Packard Enterprise Development LP
Software: HP Insight Control
Software CPE: cpe:2.3:a:hewlett_packard_enterprise_development_lp:hp_insight_control:*:*:*:*:*:*:*:*
Website: https://www.hpe.com/us/en/home.html
Total vulnerabilities: 14
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HP Insight Control HP Insight Control is affected by 14 known vulnerabilities: 1 critical, 12 medium, 1 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU5373 - Exposure of sensitive information to an unauthorized actor
CVE-2014-0160		 CWE-200 Critical
Available
Exploited
 7.3.1 25.01.2017 SB2014040101
SB2015092619
SB2014040801
and 28 more
#VU5215 - Exposed Dangerous Method or Function
CVE-2014-3568		 CWE-749 Low
No
No
 - 20.01.2017 SB2014101601
SB2015092611
SB2014101501
and 17 more
#VU5214 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2014-3566		 CWE-327 Medium
Available
No
 7.4.1 20.01.2017 SB2014101601
SB2014102102
SB2016022401
and 78 more
#VU5213 - Missing release of memory after effective lifetime
CVE-2014-3567		 CWE-401 Medium
No
No
 7.4.1 20.01.2017 SB2014101601
SB2015101602
SB2015092611
and 20 more
#VU5212 - Missing release of memory after effective lifetime
CVE-2014-3513		 CWE-401 Medium
No
No
 7.4.1 20.01.2017 SB2014101601
SB2015101602
SB2015092611
and 14 more
#VU41407 - Improper input validation
CVE-2014-3505		 CWE-20 Medium
No
No
 - 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41408 - Resource Management Errors
CVE-2014-3506		 CWE-399 Medium
No
No
 - 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41409 - Missing release of memory after effective lifetime
CVE-2014-3507		 CWE-401 Medium
No
No
 - 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41410 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3508		 CWE-200 Medium
No
No
 - 14.08.2014 SB2014081406
SB2014080704
SB2014080902
and 11 more
#VU41411 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2014-3509		 CWE-362 Medium
No
No
 - 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 9 more
#VU41412 - Improper input validation
CVE-2014-3510		 CWE-20 Medium
No
No
 - 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41413 - Improper input validation
CVE-2014-3511		 CWE-20 Medium
No
No
 - 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41414 - Memory corruption
CVE-2014-3512		 CWE-119 Medium
No
No
 - 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 2 more
#VU41415 - Improper input validation
CVE-2014-5139		 CWE-20 Medium
No
No
 - 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 7 more