Vulnerabilities > HP > Thinpro > High

DATE CVE VULNERABILITY TITLE RISK
2019-11-22 CVE-2019-18909 OS Command Injection vulnerability in HP Thinpro
The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will execute with root privileges.
low complexity
hp CWE-78
8.0
2018-01-23 CVE-2017-2740 Unspecified vulnerability in HP Thinpro
A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and 4.4.
local
low complexity
hp
7.8
2016-12-29 CVE-2016-2246 Permissions, Privileges, and Access Controls vulnerability in HP Thinpro
HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors.
local
low complexity
hp CWE-264
7.8