CVE-2010-0447

critical

Description

The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/56757

http://www.zerodayinitiative.com/advisories/ZDI-10-026

http://www.vupen.com/english/advisories/2010/0555

http://www.securityfocus.com/bid/38611

http://www.securityfocus.com/archive/1/509984/100/0/threaded

http://secunia.com/advisories/38899

http://osvdb.org/62797

http://marc.info/?l=bugtraq&m=126815897824020&w=2

Details

Source: Mitre, NVD

Published: 2010-03-10

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.08094