Known vulnerabilities in HP SiteScope

Vendor: Hewlett Packard Enterprise Development LP
Software: HP SiteScope
Software CPE: cpe:2.3:a:hewlett_packard_enterprise_development_lp:sitescope:*:*:*:*:*:*:*:*
Website: https://www.hpe.com/us/en/home.html
Total vulnerabilities: 23
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HP SiteScope HP SiteScope is affected by 23 known vulnerabilities: 10 high, 6 medium, 7 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65653 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2014-0114		 CWE-470 Medium
Available
Exploited
 11.13, 11.24.271 21.07.2022 SB2022072128
SB2022090131
SB2022120629
and 14 more
#VU38172 - Improper Privilege Management
CVE-2017-14349		 CWE-269 High
No
No
 - 30.09.2017 SB2017093004
#VU7218 - Improper Authentication
CVE-2017-8952		 CWE-287 High
No
No
 - 28.06.2017 SB2017062803
#VU7217 - Permissions, Privileges, and Access Controls
CVE-2017-8951		 CWE-264 Low
No
No
 - 28.06.2017 SB2017062803
#VU7216 - Cryptographic Issues
CVE-2017-8950		 CWE-310 Low
No
No
 - 28.06.2017 SB2017062803
#VU7215 - Cryptographic Issues
CVE-2017-8949		 CWE-310 Low
No
No
 - 28.06.2017 SB2017062803
#VU5214 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2014-3566		 CWE-327 Medium
Available
No
 - 20.01.2017 SB2014101601
SB2014102102
SB2016022401
and 78 more
#VU40769 - Improper input validation
CVE-2015-2120		 CWE-20 Medium
No
No
 - 25.05.2015 SB2015052503
#VU40918 - Permissions, Privileges, and Access Controls
CVE-2014-7882		 CWE-264 Low
No
No
 - 02.02.2015 SB2015020209
#VU41495 - Improper Authentication
CVE-2014-2614		 CWE-287 Medium
No
No
 - 07.07.2014 SB2014070706
#VU41954 - Improper input validation
CVE-2013-6207		 CWE-20 High
No
No
 - 11.03.2014 SB2013110407
#VU42400 - Improper input validation
CVE-2013-4835		 CWE-20 Medium
Available
No
 - 04.11.2013 SB2013110407
#VU42681 - Improper input validation
CVE-2013-2367		 CWE-20 High
Available
No
 - 31.07.2013 SB2013073111
#VU43481 - Improper input validation
CVE-2012-3264		 CWE-20 Medium
No
No
 - 25.09.2012 SB2012092502
#VU43482 - Improper input validation
CVE-2012-3259		 CWE-20 High
No
No
 - 25.09.2012 SB2012092502
#VU43483 - Improper input validation
CVE-2012-3260		 CWE-20 High
Available
No
 - 25.09.2012 SB2012092502
#VU43484 - Improper input validation
CVE-2012-3261		 CWE-20 High
Available
No
 - 25.09.2012 SB2012092502
#VU43485 - Improper input validation
CVE-2012-3262		 CWE-20 High
No
No
 - 25.09.2012 SB2012092502
#VU43486 - Improper input validation
CVE-2012-3263		 CWE-20 High
No
No
 - 25.09.2012 SB2012092502
#VU45087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-1727		 CWE-79 Low
No
No
 - 03.05.2011 SB2011050303


Showing elements 1 - 20 out of 23