CVE-2010-0447

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-03-10 · updated 2026-06-16
Weakness: CWE-287

Description

The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.

Affected products

HP Openview Performance Insight: through 5.4

References

http://marc.info/?l=bugtraq&m=126815897824020&w=2
http://osvdb.org/62797
http://secunia.com/advisories/38899
http://www.securityfocus.com/archive/1/509984/100/0/threaded
http://www.securityfocus.com/bid/38611
http://www.vupen.com/english/advisories/2010/0555
http://www.zerodayinitiative.com/advisories/ZDI-10-026
https://exchange.xforce.ibmcloud.com/vulnerabilities/56757
http://marc.info/?l=bugtraq&m=126815897824020&w=2
http://osvdb.org/62797
http://secunia.com/advisories/38899
http://www.securityfocus.com/archive/1/509984/100/0/threaded

Get alerted when CVE-2010-0447 or the next vulnerability affects your stack