CVE Watch—

CVE-2013-4810

HP Multiple Products Remote Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

79.0%

p100

KEV

YES

Mar 25, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

79.0%EPSS · 30 days79.0%

2026-06-302026-07-16

KEV catalog record

Product

Hewlett Packard (HP) / ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management

Vulnerability

HP Multiple Products Remote Code Execution Vulnerability

Added to KEV

Mar 25, 2022

Remediate by

Apr 15, 2022

Known ransomware use

Summary description

HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2013-4810

Related CVEs

No related CVEs by CWE or product.