CVE-2009-3843

no score yetEPSS 79%

hp operations manager: no CVSS score yet. EPSS 79% chance of exploitation in the next 30 days.

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload.

EPSS: 79% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-11-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

hp:operations_manager

References

http://marc.info/?l=bugtraq&m=125873415424980&w=2
http://secunia.com/advisories/37444
http://securitytracker.com/id?1023222
http://www.osvdb.org/60317
http://www.zerodayinitiative.com/advisories/ZDI-09-085/

Check your stack JSON