CVE-2015-2117

HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management System (vSMS) before 4.1 patch 3 and 4.2 before patch 1 do not…

published April 26, 2015

CVSS
—
EPSS
9%
Percentile
95.0
In the wild
Unconfirmed
What it is

HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management System (vSMS) before 4.1 patch 3 and 4.2 before patch 1 do not require authentication for JBoss RMI requests, which allows remote attackers to execute arbitrary code by (1) uploading this code within an archive or (2) instantiating a class.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08601 · 95.0th percentile
Published
2015-04-26T10:00Z
EPSS history
Timeline
  • 26 APR 10:00Z
    HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management System (vSMS) before 4.1 patch 3 and 4.2 before patch 1 do not…
    cvelistv5