Information disclosure in HP Hp-Ux
CVE-1999-1136
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems.
Vulnerability class: Information Disclosure
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.6 (Medium). Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.005 (41.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 41st percentile — 41.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
Weakness classification (CWE)
References
- exchange.xforce.ibmcloud.com/vulnerabilities/1413 (vdb-entry)
- www.codetalker.com/advisories/vendor/hp/hpsbux9807-081.html (URL Repurposed, vendor-advisory)
- marc.info/ (mailing-list)
- cert.ip-plus.net/bulletin-archive/msg00040.html (Vendor Advisory, vendor-advisory, Patch)
- www.ciac.org/ciac/bulletins/i-081.shtml (Patch, government-resource, Vendor Advisory, third-party-advisory)