CVE-2008-3538

CRITICAL 9.0CVE-2008-3538 · Published 02/09/2008 · updated 16/06/2026

In short

CVE-2008-3538 is a CRITICAL (CVSS 9.0) vulnerability affecting enterprise discovery (hp).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
enterprise discovery hp	`= 2.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.1= 2.1.1= 2.1.2= 2.1.3= 2.20= 2.21= 2.22= 2.50= 2.51= 2.52`	No fix yet

Description

Unspecified vulnerability in HP Enterprise Discovery 2.0 through 2.52 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the initial description of this CVE was inadvertently associated with libxml2, but it should be for HP Enterprise Discovery.

References

marc.info
secunia.com/advisories/31616 · Vendor Advisory
securitytracker.com/id
securityfocus.com/bid/30865
vupen.com/english/advisories/2008/2446 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/44709

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free