Dashboard / CVE-2013-4810

CVE-2013-4810

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet.

CISA Known Exploited Vulnerability

Vendor / Product Hewlett Packard (HP) — ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management
Date Added 2022-03-25
Remediation Due 2022-04-15
https://nvd.nist.gov/vuln/detail/CVE-2013-4810

Weakness Classification (1)

Affected Software (5)

VendorProductVersion
hp application_lifecycle_management -
hp procurve_manager 3.20
hp procurve_manager 3.20
hp procurve_manager 4.0
hp procurve_manager 4.0

References & Advisories (8)

https://www.exploit-db.com/exploits/28713/
Exploit Third Party Advisory VDB Entry
http://secunia.com/advisories/54788
Broken Link Vendor Advisory
http://www.securitytracker.com/id/1029010
Broken Link Third Party Advisory VDB Entry

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

79.47%
Raw Score 0.794680
Percentile 99.6%
Date 2026-10-29

Intelligence Sources

kev ref →

External Links