CVE-2013-2357

HP System Management Homepage (SMH) vulnerability CVE-2013-2357 affects SMH prior to version 7.2.1. The issue allows remote authenticated users to cause a Denial of Service via unknown vectors (as part of a set including CVE-2013-2358/2359/2360). HP’s security bulletin notes remediation by upgrad...

CVE-2013-2362

HP System Management Homepage (SMH) CVE-2013-2362 describes a stack buffer overflow in the iprange parameter handling (proxy/DataValidation) that allows a remote, unauthenticated attacker to execute arbitrary code on Windows targets as SYSTEM. The vulnerability is associated with ZDI-1676 and aff...

CVE-2013-2364

CVE-2013-2364 is an XSS flaw in HP System Management Homepage (SMH) prior to v7.2.1. Remote authenticated users could inject arbitrary web scripts via unspecified vectors, potentially impacting confidentiality and integrity of SMH sessions. Public records consistently cite SMH

CVE-2013-2355

HP System Management Homepage SMH before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2012-5217...

CVE-2013-2355

HP System Management Homepage (SMH) before 7.2.1 allows remote unauthorized access and potential information disclosure. The CVE-2013-2355 entry refers to unspecified vectors but is listed alongside other SMH vulnerabilities; HP’s security bulletin HPSBMU02900 documents the fix by upgrading to SM...

CVE-2013-2363

HP System Management Homepage SMH before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2356...

CVE-2013-2360

HP System Management Homepage (SMH) for Linux/Windows is affected up to version 7.2.0; CVE-2013-2360 describes a remote DoS risk for remote—authenticated users via unknown vectors. HP’s Security Bulletin HP-SMH states the fix is SMH v7.2.1 or later to resolve these vulnerabilities. Connected Red ...

CVE-2013-2356

HP System Management Homepage (SMH) before 7.2.1 is vulnerable to remote information disclosure via unspecified vectors. The security bulletin notes SMH v7.2.0 and earlier on Linux/Windows and lists an upgrade to SMH 7.2.1 or later as the fix. Affected component: HP SMH; root cause details are no...

CVE-2012-5217

HP System Management Homepage (SMH) vulnerability CVE-2012-5217 affects SMH versions prior to 7.2.1. It allows remote attackers to bypass access restrictions and obtain sensitive information via unspecified vectors. This is separate from CVE-2013-2355. HP’s Security Bulletin notes the remediation...

CVE-2013-2359

HP System Management Homepage (SMH) before version 7.2.1 is affected by CVE-2013-2359, allowing remote authenticated users to cause a Denial of Service via unknown vectors. HP’s security bulletin HPSBMU02900 rev.3 states remediation to SMH v7.2.1 or later for Windows and Linux. The CVSS v2 base s...

CVE-2013-2363

HP System Management Homepage (SMH) for Linux and Windows is affected up to version 7.2.0; CVE-2013-2363 corresponds to remote disclosure of information via unspecified vectors. The HP security bulletin HPSBMU02900 (rev.3, 2013) notes multiple remote/local vulnerabilities in SMH and lists CVE-201...

CVE-2013-3576

CVE-2013-3576 affects HP System Management Homepage (SMH); ginkgosnmp.inc uses the last URL path segment in an exec call, enabling remote authenticated users to execute arbitrary commands via PATH_INFO (e.g., snmhutil/snmpchp.php.en). Impact: remote code execution with full privileges on the HP S...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU02786)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HP System Management Homepage < 7.1.1 Multiple Vulnerabilities

According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote host is earlier than 7.1.1 and is, therefore, reportedly affected by the following vulnerabilities : - The bundled version of the libxml2 library contains multiple vulnerabilities...

CVE-2012-2012

HP System Management Homepage (SMH) versions before 7.1.1 are affected by CVE-2012-2012 due to the absence of an off autocomplete attribute for unspecified form fields, enabling remote attackers to gain access by abusing an unattended workstation. The vulnerability is documented across multiple s...

CVE-2012-2016

HP System Management Homepage (SMH) prior to 7.1.1 has an unspecified vulnerability described as allowing local users to obtain sensitive information via unknown vectors (CVE-2012-2016). The available sources identify the affected product as SMH and note a local attack scenario with medium severi...

CVE-2012-2014

HP System Management Homepage (SMH) before 7.1.1 has an input validation issue that can be exploited by remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors. The vulnerability is documented under CVE-2012-2014 and is referenced in Red Hat and OpenV...

CVE-2012-2015

Technical details (affected versions, root cause, exploit specifics) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2012-2013

HP System Management Homepage (SMH) is affected by CVE-2012-2013. The vulnerability affects SMH before version 7.1.1, allowing remote attackers to cause a denial of service or potentially obtain sensitive information or modify data via unknown vectors. No concrete exploit details are provided in ...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU02764)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...