P10 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting P10 products: 2 record(s), with severity, exploitation and fixes.

Central Management Software 1 ObserverIP Scan Tool 1

Exploited only (KEV) →

CVE-2018-25296 Medium · 5.5 CWE-120 Apr 26, 2026

P10 Central Management Software 1.4.13 Denial of Service

P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 2000-byte payload into the password field and click login to trigger an application crash and denial of service.

CVE-2018-25295 Medium · 6.2 CWE-789 Apr 26, 2026

ObserverIP Scan Tool 1.4.0.1 Denial of Service via IP Field

ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the IP input field. Attackers can paste a 2000-byte buffer of repeated characters into the IP field and trigger a search operation to cause an application crash.