Lucene search

K
cvelistMitreCVELIST:CVE-2009-4189
HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-4189

2022-10-0316:24:03
mitre
www.cve.org
1

9.8 High

AI Score

Confidence

High

0.887 High

EPSS

Percentile

98.7%

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3099 and CVE-2009-3843.

9.8 High

AI Score

Confidence

High

0.887 High

EPSS

Percentile

98.7%