Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2016-4377
HistoryAug 22, 2016 - 10:59 a.m.

CVE-2016-4377

2016-08-2210:59:06
[email protected]
web.nvd.nist.gov
2

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.009

Percentile

83.1%

JSON

HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite (CISSS) before 2.13.1, Power Advisor before 7.8.2, Insight Management Sizer before 16.12.1, Synergy Planning Tool before 3.3, SAP Sizing Tool before 16.12.1, Sizing Tool for SAP Business Suite powered by HANA before 16.11.1, Sizer for ConvergedSystems Virtualization before 16.7.1, Sizer for Microsoft Exchange Server before 16.12.1, Sizer for Microsoft Lync Server 2013 before 16.12.1, Sizer for Microsoft SharePoint 2013 before 16.13.1, Sizer for Microsoft SharePoint 2010 before 16.11.1, and Sizer for Microsoft Skype for Business Server 2015 before 16.5.1 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd
Node
hpconverged_infrastructure_solution_sizer_suiteRange≤2.13.0
OR
hpinsight_management_sizerRange≤16.12.0
OR
hppower_advisorRange≤7.8.1
OR
hpsap_sizing_toolRange≤16.12.0
OR
hpsizer_for_converged_systems_virtualizationRange≤16.7.0
OR
hpsizer_for_microsoft_exchange_server_2010Range≤16.12.0
OR
hpsizer_for_microsoft_exchange_server_2013Range≤16.12.0
OR
hpsizer_for_microsoft_exchange_server_2016Range≤16.12.0
OR
hpsizer_for_microsoft_lync_server_2013Range≤16.12.0
OR
hpsizer_for_microsoft_sharepoint_2010Range≤16.11.0
OR
hpsizer_for_microsoft_sharepoint_2013Range≤16.13.0
OR
hpsizer_for_microsoft_skype_for_business_server_2015Range≤16.5.0
OR
hpsizing_tool_for_sap_business_suite_powered_by_hanaRange≤16.11.0
OR
hpstorage_sizing_toolRange≤13.0
OR
hpsynergy_planning_toolRange≤3.2
VendorProductVersionCPE
hpconverged_infrastructure_solution_sizer_suite*cpe:2.3:a:hp:converged_infrastructure_solution_sizer_suite:*:*:*:*:*:*:*:*
hpinsight_management_sizer*cpe:2.3:a:hp:insight_management_sizer:*:*:*:*:*:*:*:*
hppower_advisor*cpe:2.3:a:hp:power_advisor:*:*:*:*:*:*:*:*
hpsap_sizing_tool*cpe:2.3:a:hp:sap_sizing_tool:*:*:*:*:*:*:*:*
hpsizer_for_converged_systems_virtualization*cpe:2.3:a:hp:sizer_for_converged_systems_virtualization:*:*:*:*:*:*:*:*
hpsizer_for_microsoft_exchange_server_2010*cpe:2.3:a:hp:sizer_for_microsoft_exchange_server_2010:*:*:*:*:*:*:*:*
hpsizer_for_microsoft_exchange_server_2013*cpe:2.3:a:hp:sizer_for_microsoft_exchange_server_2013:*:*:*:*:*:*:*:*
hpsizer_for_microsoft_exchange_server_2016*cpe:2.3:a:hp:sizer_for_microsoft_exchange_server_2016:*:*:*:*:*:*:*:*
hpsizer_for_microsoft_lync_server_2013*cpe:2.3:a:hp:sizer_for_microsoft_lync_server_2013:*:*:*:*:*:*:*:*
hpsizer_for_microsoft_sharepoint_2010*cpe:2.3:a:hp:sizer_for_microsoft_sharepoint_2010:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 151

Related

openvas 12
cve 1
prion 1
cvelist 1
openvas
openvas
HPE Synergy Planning Tool Remote Arbitrary Code Execution Vulnerability
2016-09-02 00:00:00
HPE Power Advisor Remote Arbitrary Code Execution Vulnerability
2016-09-02 00:00:00
HPE Sizer for Microsoft Skype for Business Server Remote Arbitrary Code Execution Vulnerability
2016-10-17 00:00:00
cve
cve
CVE-2016-4377
2016-08-22 10:59:06
prion
prion
Code injection
2016-08-22 10:59:00
cvelist
cvelist
CVE-2016-4377
2016-08-22 10:00:00

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.009

Percentile

83.1%

JSON
Related for NVD:CVE-2016-4377
openvas12cve1prion1cvelist1