Sitescope

Vendor:

First CVE: Oct 21, 2008 · Active for 17 years

23
Total CVEs
More Total CVEs than 96% of tracked products
2.6
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 64% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Sitescope over time

Volume of CVEsAvg CVSS Base Score
First CVE
Oct 21, 2008
17 years ago
Most Recent CVE
Feb 4, 2020
2,366 days ago

CVE Severity & Scoring

Sitescope23 CVEs
All CVEs352,785 CVEs
MediumHighCritical
Attack Vector
Local3 (13.0%)
Network3 (13.0%)
Unknown17 (73.9%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (26.1%)
High0 (0.0%)
Unknown17 (73.9%)
User Interaction
None6 (26.1%)
Unknown17 (73.9%)
Required0 (0.0%)
Privileges Required
Low3 (13.0%)
High0 (0.0%)
None3 (13.0%)
Unknown17 (73.9%)

Top CVEs

Signals from CVEs in this product scope (23 CVEs).

23 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678.
Jul 31, 201310.083NOYES
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to th
Nov 4, 20137.575NOYES
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461.
Sep 25, 201210.063NONO
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.
Sep 25, 201210.062NOYES
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.
Sep 25, 201210.062NOYES
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465.
Sep 25, 201210.033NONO
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464.
Sep 25, 201210.032NONO
An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sen
Sep 30, 20179.829NONO
Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors.
Jul 29, 20118.326NONO
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472.
Sep 25, 20127.525NONO

Exploit Exposure

Signals from CVEs in this product scope (23 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
4 CVEs
17.4% of CVEs· 98th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
8.7% of CVEs· 86th percentile

Social Chatter

Signals from CVEs in this product scope (23 CVEs).

Media Mentions

Signals from CVEs in this product scope (23 CVEs).

Top CNAs Publishing CVEs For Sitescope

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.5445.33.2%00
9.035.63.0%00
11.3357.21.9%00
11.3257.21.9%00
11.3157.21.9%00
11.30.52167.52.2%00
11.3067.32.7%00
11.24.39167.52.2%00
11.2477.02.3%00
11.2377.02.3%00
11.2277.02.3%00
11.21107.616.0%02
11.2097.417.4%02
11.1337.23.4%00
11.12108.724.5%03
11.11108.724.5%03
11.10108.724.5%03
11.155.716.8%01
11.0155.716.8%01
10.1366.314.5%01