{
    "id": "CVE-2008-0068",
    "published": "2008-04-16 18:05:00",
    "last_modified": "2026-06-16 22:48:52",
    "cvss_score": "5.0",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
    "cwe": "CWE-22",
    "description": "Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.",
    "epss_score": "0.05088",
    "epss_percentile": "0.92094",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-02 18:17:07",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "hp",
            "product": "openview_network_node_manager"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "31638",
            "title": "HP OpenView Network Node Manager (OV NNM) 7.x - 'OpenView5.exe?Action' Traversal Arbitrary File Access",
            "date": "2008-04-11",
            "url": "https://www.exploit-db.com/exploits/31638"
        }
    ],
    "refs_list": [
        "http://aluigi.altervista.org/adv/closedviewx-adv.txt",
        "http://marc.info/?l=bugtraq&m=121553649611253&w=2",
        "http://secunia.com/advisories/29796",
        "http://secunia.com/secunia_research/2008-4/advisory/",
        "http://securityreason.com/securityalert/3814",
        "http://www.osvdb.org/44359",
        "http://www.securityfocus.com/archive/1/490771",
        "http://www.securityfocus.com/archive/1/490834/100/0/threaded",
        "http://www.securityfocus.com/bid/28745",
        "http://www.securitytracker.com/id?1019838",
        "http://www.securitytracker.com/id?1019839",
        "http://www.vupen.com/english/advisories/2008/1214/references",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/41790",
        "http://aluigi.altervista.org/adv/closedviewx-adv.txt",
        "http://marc.info/?l=bugtraq&m=121553649611253&w=2",
        "http://secunia.com/advisories/29796",
        "http://secunia.com/secunia_research/2008-4/advisory/",
        "http://securityreason.com/securityalert/3814",
        "http://www.osvdb.org/44359",
        "http://www.securityfocus.com/archive/1/490771",
        "http://www.securityfocus.com/archive/1/490834/100/0/threaded",
        "http://www.securityfocus.com/bid/28745",
        "http://www.securitytracker.com/id?1019838",
        "http://www.securitytracker.com/id?1019839",
        "http://www.vupen.com/english/advisories/2008/1214/references"
    ]
}