What’s Vulnerable › Vulnerabilities

CVE-2009-4000

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 19.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-01-20 · updated 2026-06-16
• Weakness: CWE-22

Description

Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.

Affected products

• HP Power Manager: through 4.2.9; 4.2.5, 4.2.6, 4.2.7, 4.2.8

References

• http://marc.info/?l=bugtraq&m=126393370331959&w=2
• http://secunia.com/advisories/37280
• http://secunia.com/secunia_research/2009-48/
• http://securitytracker.com/id?1023470
• http://www.securityfocus.com/bid/37873
• http://marc.info/?l=bugtraq&m=126393370331959&w=2
• http://secunia.com/advisories/37280
• http://secunia.com/secunia_research/2009-48/
• http://securitytracker.com/id?1023470
• http://www.securityfocus.com/bid/37873

Get alerted when CVE-2009-4000 or the next vulnerability affects your stack