Vulnerabilities > HP > Release Control

DATE CVE VULNERABILITY TITLE RISK
2016-08-08 CVE-2016-4374 Server-Side Request Forgery (SSRF) vulnerability in HP Release Control 9.13/9.20/9.21
HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information or cause a denial of service, via unspecified vectors.
network
low complexity
hp CWE-918
7.7
2016-05-30 CVE-2016-1999 Improper Access Control vulnerability in HP Release Control 9.13/9.20/9.21
The server in HP Release Control 9.13, 9.20, and 9.21 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
network
low complexity
hp CWE-284
critical
9.8