Hp Mercury Quality Center vulnerabilities
3 known vulnerabilities affecting hp/mercury_quality_center.
Total CVEs
3
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2007-1819P2CRITICALCVSS 9.3PoCv8.2v9.02007-04-02
CVE-2007-1819 [CRITICAL] CWE-119 CVE-2007-1819: Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in Tes
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.
nvd
CVE-2007-1882P3MEDIUMCVSS 6.5PoCv9.02007-04-06
CVE-2007-1882 [MEDIUM] CVE-2007-1882: qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352
qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authenticated users to execute arbitrary SQL commands via the RunQuery method.
nvd
CVE-2007-5289P3HIGHCVSS 7.6≤ 9.2v8.0+2 more2009-02-24
CVE-2007-5289 [HIGH] CWE-264 CVE-2007-5289: HP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached client-s
HP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached client-side scripts to implement "workflow" and decisions about the "capability" of a user, which allows remote attackers to execute arbitrary code via crafted use of the Open Test Architecture (OTA) API, as demonstrated by modifying (1) common.tds, (2) defects.t
nvd