https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-7863.htmlhttps://patchthecve.com/cve/CVE-2015-7863.htmlWed, 17 Jun 2026 00:33:17 +0000MEDIUM 5.0: The default configuration of Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 enables a remote Notify capability without the Extended Notify Security features, which might allow remote attackers to bypass intended access restrictions viahttps://patchthecve.com/cve/CVE-2015-7862.htmlhttps://patchthecve.com/cve/CVE-2015-7862.htmlWed, 17 Jun 2026 00:33:17 +0000MEDIUM 5.0: Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 improperly implements the Role Based Access Control feature, which might allow remote attackers to modify an account's role assignments via unspecified vectors.https://patchthecve.com/cve/CVE-2015-7861.htmlhttps://patchthecve.com/cve/CVE-2015-7861.htmlWed, 17 Jun 2026 00:33:17 +0000HIGH 10.0: Persistent Accelerite Radia Client Automation (formerly HP Client Automation), possibly before 9.1, allows remote attackers to execute arbitrary code by sending unspecified commands in an environment that lacks relationship-based firewalling.https://patchthecve.com/cve/CVE-2015-7860.htmlhttps://patchthecve.com/cve/CVE-2015-7860.htmlWed, 17 Jun 2026 00:33:17 +0000HIGH 10.0: Stack-based buffer overflow in the agent in Persistent Accelerite Radia Client Automation (formerly HP Client Automation), possibly before 9.1, allows remote attackers to execute arbitrary code by sending a large amount of data in an environment that lacks relationship-based firewalling.https://patchthecve.com/cve/CVE-2015-1498.htmlhttps://patchthecve.com/cve/CVE-2015-1498.htmlWed, 17 Jun 2026 00:22:32 +0000HIGH 10.0: Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to (1) enumerate user accounts via a getUsers request, (2) assign a role to a user account via an addAssigneesToRole request, (3) remove a role from a user account via a remhttps://patchthecve.com/cve/CVE-2015-1497.htmlhttps://patchthecve.com/cve/CVE-2015-1497.htmlWed, 17 Jun 2026 00:22:31 +0000HIGH 10.0: radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465.