Vulnerability · Published Jun 24, 2022 · Assigned by hpe
CVE-2022-28619
High 7.8
In plain English
A high-severity security flaw in HPE Version Control Repository Manager. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.2%top 85.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The vulnerability could allow local escalation of privilege. HPE has made the following software update to resolve the vulnerability in HPE Version Control Repository Manager installer 7.6.14.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | HPE Version Control Repository Manager | Prior to v7.6.14.0 |