CVE-2015-5445
8.8 · HIGHOverview
CVE-2015-5445 is a high-severity vulnerability affecting hp storeonce_backup_system_software. It was published on January 5, 2016 and has a CVSS 3.0 base score of 8.8 (HIGH).
This vulnerability has a CVSS 3.0 base score of 8.8, rated HIGH. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
Technical Description
Cross-site request forgery (CSRF) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
Remediation
Check the references section for vendor advisories and patches from hp. Update storeonce_backup_system_software to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|---|---|---|
| hp | storeonce_backup_system_software | 0 | Affected |
References
Frequently Asked Questions
What is CVE-2015-5445?
CVE-2015-5445 is a high-severity vulnerability affecting hp storeonce_backup_system_software. It was published on January 5, 2016 and has a CVSS 3.0 base score of 8.8 (HIGH).
How severe is CVE-2015-5445?
This vulnerability has a CVSS 3.0 base score of 8.8, rated HIGH. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2015-5445?
Check the references section for vendor advisories and patches from hp. Update storeonce_backup_system_software to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2015-5445?
CyberStrike's AI-powered security agents can automatically detect CVE-2015-5445 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related HIGH CVEs from 2015
View all →Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before
Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x b
The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote att
Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to
Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a cr
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista
JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code
Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista S
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS befo
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause