CVE-2022-1602

A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8). The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 (SP9). HP has released Service Pack 10 (SP10) to remediate the potential vulnerability introduced in SP8.

• https://support.hp.com/us-en/document/ish_6415074-6415171-16/hpsbhf03789Vendor Advisory
• https://support.hp.com/us-en/document/ish_6415074-6415171-16/hpsbhf03789Vendor Advisory

Published

Sep 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1596Incorrect Permission Assignment for Critical Resource vulner…6.5
• CVE-2022-1597The WPQA Builder WordPress plugin before 5.4, used as a comp…6.1
• CVE-2022-1598The WPQA Builder WordPress plugin before 5.5 which is a comp…5.3
• CVE-2022-1599The Admin Management Xtended WordPress plugin before 2.4.5 d…6.5
• CVE-2022-1600The YOP Poll WordPress plugin before 6.4.3 prioritizes getti…5.3
• CVE-2022-1601The User Access Manager WordPress plugin before 2.2.18 prior…5.3
• CVE-2022-1603The Mail Subscribe List WordPress plugin before 2.1.4 does n…4.3
• CVE-2022-1604The MailerLite WordPress plugin before 1.5.4 does not saniti…6.1
• CVE-2022-1605The Email Users WordPress plugin through 4.8.8 does not have…6.5
• CVE-2022-1606Incorrect privilege assignment in M-Files Server versions be…4.3
• CVE-2022-1607Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsa…8.8
• CVE-2022-1608The OnePress Social Locker WordPress plugin through 5.6.2 do…6.5