CVE-2007-4931

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-18 · updated 2026-06-16

Description

HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for OpenSSL.

Affected products

Hewlett Packard Enterprise System Management Homepage for Windows and Linux: 2.0.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2 (+8)

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01164065
http://osvdb.org/45941
http://securitytracker.com/id?1018696
http://www.securityfocus.com/bid/25675
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01164065
http://osvdb.org/45941
http://securitytracker.com/id?1018696
http://www.securityfocus.com/bid/25675

Get alerted when CVE-2007-4931 or the next vulnerability affects your stack