This page lists publicly disclosed CVE vulnerabilities affecting hp power_manager (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2011-0280 | Multiple cross-site scripting (XSS) vulnerabilities in HP Power Manager (HPPM) 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the logType parameter to Contents/exportlogs.asp, (2) the Id parameter to Contents/pagehelp.asp, or the (3) SORTORD or (4) SORTCOL parameter to Contents/applicationlogs.asp. NOTE: some of these details are obtained from third party information. | [email protected] | 4.3 | 0.67% | 2011-03-14 | 2026-04-29 |
| CVE-2011-0277 | Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts. | [email protected] | 6.8 | 0.17% | 2011-02-09 | 2026-04-29 |
| CVE-2010-4113 | Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via a long Login variable to the management web server. | [email protected] | 9.3 | 6.83% | 2010-12-22 | 2026-04-29 |
| CVE-2009-4000 | Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter. | [email protected] | 10.0 | 31.57% | 2010-01-20 | 2026-04-29 |
| CVE-2009-3999 | Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter. | [email protected] | 10.0 | 60.84% | 2010-01-20 | 2026-04-29 |
| CVE-2009-2685 | Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable. | [email protected] | 10.0 | 85.43% | 2009-11-06 | 2026-04-23 |