CVE Feed

    Dashboard / CVE / CVE-2016-2002

    CVE-2016-2002

    The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417.

    Published:Apr 20, 2016
    Last Modified:Nov 19, 2025
    EPS:Apr 20, 2016
    EPSS Score:0.09447
    CVSS Score:9.8

    Affected Products

    Vendor
    Opentext
    Product
    Vertica

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-12453 (CVSS 5.1) — Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText…
    CVE-2025-12454 (CVSS 5.1) — Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText…
    CVE-2025-12455 (CVSS 5.1) — Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.   The vulner…
    CVE-2024-9432 (CVSS 6.9) — Cleartext Storage of Sensitive Information vulnerability in OpenText™ Vertica allows Retrieve Embedded Sensiti…
    CVE-2024-6360 (CVSS 6.9) — Incorrect Permission Assignment for Critical Resource vulnerability in OpenText™ Vertica could allow Privilege…
    CVE-2023-7248 (CVSS 5) — Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.  …
    CVE-2017-5802 (CVSS 9.8) — A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was fou…
    CVE-2015-6867 (CVSS 7.5) — The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote at…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High