CVE-2016-4394

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue...

CVE-2016-4393

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

Buffer overflow

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

Cross site scripting

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

Buffer overflow

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4393

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

CVE-2016-4393

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

CVE-2016-4394

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue...

CVE-2016-4395

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4396

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4393

HP/HPE System Management Homepage (SMH) is affected by CVE-2016-4393, a cross-site scripting vulnerability in versions before 7.6. The issue allows a remote authenticated attacker to obtain sensitive information via unspecified vectors. Affected product/version: SMH prior to v7.6. Root cause: XSS...

CVE-2016-4396

CVE-2016-4396 affects HPE System Management Homepage (SMH) prior to v7.6. The vulnerability is a remote code execution stemming from an overflow in mod_smh_config.so when handling the TKN parameter (SSO proxy path). An unauthenticated, remote attacker can exploit this to execute arbitrary code on...

CVE-2016-4394

HP System Management Homepage (SMH) vulnerable to CVE-2016-4394: an HSTS bypass allows remote attackers to obtain sensitive information on SMH versions prior to 7.6. The connected OpenVAS/NVT entries corroborate an HSTS-related disclosure vulnerability affecting HP SMH, but detailed technical spe...

CVE-2016-4395

HP System Management Homepage (SMH) before v7.6 is vulnerable to remote code execution via a stack/buffer overflow in the SetSMHData handling of admin-group parameters (mod_smh_config.so). Exploitation is described in ZDI-16-587, with unauthenticated remote access leading to code execution under ...

PT-2016-5936

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6 Description The issue allows remote authenticated attackers to obtain sensitive information due to an XSS problem. Recommendations For versions prior to 7.6, update to version 7.6 or later t...

PT-2016-5937

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" HTTP Strict Transport Security issue. Recommendations For versions...

PT-2016-5939

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6 Description The issue is related to a "Buffer Overflow" problem, which allows remote attackers to have an unspecified impact. This is a remote code execution vulnerability. Recommendations F...

PT-2016-5938

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6 Description The issue is related to a "Buffer Overflow" and allows remote attackers to have an unspecified impact. It is described as a Stack Buffer Overflow Remote Code Execution issue...

CVE-2016-4395: Improper Restriction of Operations within the Bounds of a Memory Buffer

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4396: Improper Restriction of Operations within the Bounds of a Memory Buffer

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...