How severe is CVE-2009-2686?

CVE-2009-2686 has a CVSS 2.0 base score of 7.2, rated high severity.

Is CVE-2009-2686 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2009-2686?

CVE-2009-2686 primarily affects Hp Nonstop Server. In total, 28 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2009-2686?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2009-2686 published?

CVE-2009-2686 was published on 2009-12-02 and last updated on 2026-06-16.

CVE-2009-2686

CVE-2009-2686 is a high-severity vulnerability in Hp Nonstop Server with a CVSS 2.0 base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.2)
EPSS exploit prediction: 0% (36th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Hp Nonstop Server
Published: 2009-12-02
Last modified: 2026-06-16

Description

Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a denial of service, or obtain "access to data" via unknown vectors.

Frequently asked questions

What is CVE-2009-2686?: Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a denial of service, or obtain "access to data" via unknown vectors.
How severe is CVE-2009-2686?: CVE-2009-2686 has a CVSS 2.0 base score of 7.2, rated high severity.
Is CVE-2009-2686 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2009-2686?: CVE-2009-2686 primarily affects Hp Nonstop Server. In total, 28 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2009-2686?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2009-2686 published?: CVE-2009-2686 was published on 2009-12-02 and last updated on 2026-06-16.

References

Affected products (28)

cpe:2.3:a:hp:nonstop_server:g06.04.00:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.04.01:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.04.02:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.07.01:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.08.00:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.12.00:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.13.00:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.14.00:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.15.00:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.15.01:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.15.02:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.16.00:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.16.01:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.17.00:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.17.01:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.18.00:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.18.01:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.27:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.28:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.29:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:g06.30:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:j06.05.00:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:j06.05.01:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:j06.06.00:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:j06.06.01:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:j06.06.02:*:*:*:*:*:*:*
cpe:2.3:a:hp:nonstop_server:j06.07.00:*:*:*:*:*:*:*
cpe:2.3:h:hp:nonstop_server:g06.29:*:*:*:*:*:*:*

More vulnerabilities in Hp Nonstop Server

CVE-2011-2411 — Critical (CVSS 9.0): Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when…
CVE-2012-3280 — Medium (CVSS 6.3): Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain…
CVE-2006-5704 — Medium (CVSS 6.2): HP NonStop Server G06.29, when running Standard Security T6533G06 before T6533G06^ABK, does not properly evaluate…
CVE-2009-2678 — Medium (CVSS 4.0): Unspecified vulnerability in Open System Services (OSS) Name Server on HP NonStop G06.27, G06.28, G06.29, G06.30,…

All CVEs affecting Hp Nonstop Server →