CVE-2015-5410
CVE-2015-5410 is a medium-severity vulnerability in Hp Version Control Repository Manager with a CVSS 2.0 base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 6.5)
- EPSS exploit prediction: 3% (85th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Hp Version Control Repository Manager
- Published:
- Last modified:
Description
HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of service via unspecified vectors.
Frequently asked questions
- What is CVE-2015-5410?
- HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of service via unspecified vectors.
- How severe is CVE-2015-5410?
- CVE-2015-5410 has a CVSS 2.0 base score of 6.5, rated medium severity.
- Is CVE-2015-5410 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (85th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2015-5410?
- CVE-2015-5410 affects Hp Version Control Repository Manager. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2015-5410?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2015-5410 published?
- CVE-2015-5410 was published on 2015-08-26 and last updated on 2026-06-17.
References
- http://www.securitytracker.com/id/1033378
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04765115
Affected products (1)
- cpe:2.3:a:hp:version_control_repository_manager:*:*:*:*:*:*:*:*
More vulnerabilities in Hp Version Control Repository Manager
- CVE-2015-3113 — Critical (CVSS 9.8): Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows…
- CVE-2016-8515 — High (CVSS 8.8): A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem…
- CVE-2015-8651 — High (CVSS 8.8): Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and…
- CVE-2016-8513 — High (CVSS 8.0): A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The…
- CVE-2015-5409 — High (CVSS 7.5): Buffer overflow in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to…
- CVE-2015-5411 — Medium (CVSS 6.8): HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to obtain sensitive…