CVE-2009-4189
NoneCVSS
—
EPSS
78.5%
Published
Dec 3, 2009
CISA due date
—
The record
HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3099 and CVE-2009-3843.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-19750 A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. CWE-255
- CVE-2026-11552 A vulnerability has been found in SourceCodester Onlne Examination & Learning Management… CWE-255
- CVE-2026-11515 A vulnerability has been found in SourceCodester Barangay Resident Profiling and… CWE-255
- CVE-2026-6597 A weakness has been identified in langflow-ai langflow up to 1.8.3. CWE-255
- CVE-2026-4251 A vulnerability was determined in CityData CityChat up to 0.12.6 on Android. CWE-255
- CVE-2026-4250 A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to… CWE-255
- CVE-2026-4242 A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0… CWE-255
- CVE-2026-4243 A weakness has been identified in La Nacion App 10.2.25 on Android. CWE-255