VIR Vulnerability Intelligence Relay

CVE-2013-2366

critical
Published 2013-10-13 · Modified 2026-04-29
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0

Description

Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors, aka ZDI-CAN-1802.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: hp-security-alert@hp.com — http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03844594

Application impact
VendorProductVersionsFixed
ibmbusiness_process_monitor9.13.1
ibmbusiness_process_monitor9.22

References

Verify integrity in audit chain (admin only). AS-IS.