← Vulnerability feed

Vulnerability record · CVE-2011-4160 · published 24 November 2011

CVE-2011-4160: Hp operations agent vulnerability

Hp · Operations Agent

Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors.

3.2 CVSS 2.0 Low EPSS 0.33% · top 76.6%
3.2CVSS 2.0 base score
0.33%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors.

AV:L/AC:L/Au:S/C:P/I:P/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=132198248000785&w=2
http://secunia.com/advisories/46971
http://www.securityfocus.com/bid/50761
http://marc.info/?l=bugtraq&m=132198248000785&w=2
http://secunia.com/advisories/46971
http://www.securityfocus.com/bid/50761

Track CVE-2011-4160 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2012-2019HP Operations Agent remote code execution flawHP Operations Agent before 11.03.12 contains an unspecified vulnerability that allows remote attackers to execute arbitrary code via unknown vectors,…EPSS 65%analysed10.0CVE-2012-2020HP Operations Agent remote code execution flawHP Operations Agent before 11.03.12 contains an unspecified vulnerability that lets remote attackers execute arbitrary code. The record gives no deta…EPSS 65%analysed10.0CVE-2010-0444Hp operations agent vulnerabilityHP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute a…EPSS 8.6%7.5CVE-2017-3733Openssl improper input validation vulnerabilityDuring a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this…EPSS 13%7.5CVE-2010-3004Hp operations agent vulnerabilityUnspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows remote attackers to execute arbitrary code via unknown vectors.EPSS 5.3%6.8CVE-2010-3005Hp operations agent vulnerabilityUnspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows local users to gain privileges via unknown vectors.EPSS 0.28%6.4CVE-2011-2608Hp openview performance agent improper input validation vulnerabilityovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60…EPSS 4.8%4.4CVE-2014-2630Hp operations agent vulnerabilityUnspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors.EPSS 7.1%

Source: NIST National Vulnerability Database (record CVE-2011-4160), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.