CVE-2010-0447 json
The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and vali…
published 2010-03-10 16 y ago modified 2026-06-16 4 mo ago also EUVD-2010-0478
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 5.3%
- EPSS 5.3% chance of exploitation in 30 days, percentile 92%
- public exploits
- 0
- none known
Summary
The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.
Exploit prediction
5.25% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-287 Improper Authentication
References
-
marc.info
/?l=bugtraq&m=126815897824020&w=2
vendor-advisory
-
secunia.com
/advisories/38899
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2010/0555
vdb-entry, vendor-advisory
-
securityfocus.com
/archive/1/509984/100/0/threaded
mailing-list
-
securityfocus.com
/bid/38611
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/56757
vdb-entry
- zerodayinitiative.com /advisories/ZDI-10-026
-
osvdb.org
/62797
vdb-entry
Sources
- CVE List CVE-2010-0447
- NVD CVE-2010-0447
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.