Hpe Smart Update Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Hpe Smart Update Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-11988 — CVSS 9.8 (critical): A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager (SUM) earlier than version 8.3.5.
• CVE-2020-7136 — CVSS 9.8 (critical): A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard…
• CVE-2019-11987 — CVSS 7.8 (high): A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of privilege.
• CVE-2014-2608 — CVSS 7.2 (high): Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows…