HPE System Management Homepage Buffer Overflow Vulnerability

HPE System Management Homepage SMH is a Web-based interface from Hewlett Packard Enterprise HPE. A buffer overflow vulnerability exists in versions prior to HPE SMH v7.6, which can be exploited by remote attackers to cause a denial of service...

Hewlett Packard Enterprise System Management Homepage SSO TKN Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise System Management Homepage. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of /proxy/sso requests. When parsin...

Hewlett Packard Enterprise System Management Homepage SetSMHData Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise System Management Homepage. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of /proxy/SetSMHData requests. When...

HPE System Management Homepage Cross-Site Scripting Vulnerability

HPE System Management Homepage SMH is a Web-based interface from Hewlett Packard Enterprise HPE. The interface consolidates and simplifies the process of single-system management of HP servers running HP-UX, Linux, and Microsoft Windows operating systems. A cross-site scripting vulnerability exis...

CVE-2016-4396

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4395

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4395

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4394

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue...

CVE-2016-4394

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue...

CVE-2016-4393

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

Buffer overflow

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

Buffer overflow

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4393

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

Cross site scripting

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

CVE-2016-4395

HP System Management Homepage (SMH) before v7.6 is vulnerable to remote code execution via a stack/buffer overflow in the SetSMHData handling of admin-group parameters (mod_smh_config.so). Exploitation is described in ZDI-16-587, with unauthenticated remote access leading to code execution under ...

CVE-2016-4394

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue...

CVE-2016-4396

CVE-2016-4396 affects HPE System Management Homepage (SMH) prior to v7.6. The vulnerability is a remote code execution stemming from an overflow in mod_smh_config.so when handling the TKN parameter (SSO proxy path). An unauthenticated, remote attacker can exploit this to execute arbitrary code on...

CVE-2016-4396

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4393

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

CVE-2016-4395

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...