Universal Configuration Management Database
Vendor:
First CVE: Apr 19, 2014 · Active for 12 years
7
Total CVEs
More Total CVEs than 83% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Universal Configuration Management Database over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 19, 2014
12 years ago
Most Recent CVE
Sep 16, 2015
3,965 days ago
CVE Severity & Scoring
Universal Configuration Management Database7 CVEs
43%
57%
All CVEs352,708 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown7 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown7 (100.0%)
User Interaction
None0 (0.0%)
Unknown7 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown7 (100.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-7883MEDIUM HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a resp | Feb 15, 2015 | 5.0 | 40 | NO | YES |
CVE-2014-2617HIGH Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-21 | Jul 7, 2014 | 10.0 | 35 | NO | NO |
CVE-2014-2616HIGH Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-20 | Jul 7, 2014 | 7.5 | 26 | NO | NO |
CVE-2014-2615HIGH Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-20 | Jul 7, 2014 | 7.5 | 22 | NO | NO |
CVE-2013-6215HIGH Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code v | Apr 19, 2014 | 8.5 | 22 | NO | NO |
CVE-2015-5440MEDIUM HP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before 10.11CUP6, and 10.2x before 10.21 allows local users to obtain sensitive information via unspecified vectors. | Sep 16, 2015 | 4.9 | 17 | NO | NO |
CVE-2013-6214MEDIUM Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive | Apr 19, 2014 | 4.0 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
14.3% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Universal Configuration Management Database
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.05 | 2 | 4.5 | 19.1% | 0 | 1 |
| 10.21 | 1 | 4.9 | 0.6% | 0 | 0 |
| 10.11 | 2 | 5.0 | 18.8% | 0 | 1 |
| 10.10 | 6 | 7.1 | 5.5% | 0 | 0 |
| 10.01 | 7 | 6.8 | 10.0% | 0 | 1 |
| 10.00 | 1 | 4.9 | 0.6% | 0 | 0 |