Dashboard / CVE-2025-1697

CVE-2025-1697

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 39/100
Published: 2025-04-18 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Low Complexity No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
AT: None
VC: None
VI: High
VA: High

Description

A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential vulnerability.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
HP, Inc. HP Touchpoint Analytics Service See HP security bulletin reference for affected versions

References & Advisories (1)

Bug Bounty Relevance

39 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

6.9 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.21%
Raw Score 0.002070
Percentile 10.9%
Date 2026-11-07

EPSS Trend

2026-11-07
0.00207
2026-11-06
0.00207
2026-11-05
0.00207
2026-11-04
0.00207
2026-11-03
0.00207

Intelligence Sources

mitre ref →

External Links