78 matches found
CVE-2013-4821
CVE-2013-4821 affects HP System Management Homepage (SMH) prior to 7.2.1. It allows remote authenticated users to cause a denial of service via unspecified vectors. Public sources (NVD, Red Hat, CERT) describe a remote DoS impact with the HP Security Bulletin confirming a fix in SMH 7.2.1 (Window...
CVE-2014-2640
HP System Management Homepage (SMH) is affected by CVE-2014-2640, a cross-site scripting (XSS) vulnerability in SMH before version 7.4. The issue is tied to input handling of the RedirectUrl parameter in red2301.html, enabling remote attackers to inject arbitrary script via specially crafted link...
CVE-2013-2358
HP System Management Homepage (SMH) before 7.2.1 is vulnerable to remote Denial of Service by authenticated users (product: SMH; version
CVE-2012-0135
HP System Management Homepage (SMH) prior to version 7.0 is affected by an unspecified vulnerability that allows remote authenticated users to cause a denial of service via unknown vectors. The CVE entry is consistently described across sources as affecting SMH before 7.0, with a LOW CVSS v2 base...
CVE-2016-4395
HP System Management Homepage (SMH) before v7.6 is vulnerable to remote code execution via a stack/buffer overflow in the SetSMHData handling of admin-group parameters (mod_smh_config.so). Exploitation is described in ZDI-16-587, with unauthenticated remote access leading to code execution under ...
CVE-2017-12552
CVE-2017-12552 is a local arbitrary command-execution flaw in HPE System Management Homepage (SMH) for Windows and Linux, affecting versions prior to 7.6.1. The root cause is an issue in SMH that permits execution of OS commands from a crafted request. The documented impact includes potential com...
CVE-2012-2016
HP System Management Homepage (SMH) prior to 7.1.1 has an unspecified vulnerability described as allowing local users to obtain sensitive information via unknown vectors (CVE-2012-2016). The available sources identify the affected product as SMH and note a local attack scenario with medium severi...
CVE-2016-4393
HP/HPE System Management Homepage (SMH) is affected by CVE-2016-4393, a cross-site scripting vulnerability in versions before 7.6. The issue allows a remote authenticated attacker to obtain sensitive information via unspecified vectors. Affected product/version: SMH prior to v7.6. Root cause: XSS...
CVE-2007-3260
The CVE-2007-3260 issue affects HP System Management Homepage (SMH) for Linux prior to version 2.1.9 when used with Novell eDirectory. The vulnerability arises from a misconfiguration where eDirectory members are assigned to the root group, enabling remote authenticated eDirectory users to gain p...
CVE-2008-4413
HP System Management Homepage (SMH) for HP-UX is affected by CVE-2008-4413. Affected versions: SMH 2.2.6 and earlier on HP-UX B.11.11 and B.11.23; SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31. Vulnerability allows local unauthorized access via unspecified vectors (possibly related...
CVE-2013-2359
HP System Management Homepage (SMH) before version 7.2.1 is affected by CVE-2013-2359, allowing remote authenticated users to cause a Denial of Service via unknown vectors. HP’s security bulletin HPSBMU02900 rev.3 states remediation to SMH v7.2.1 or later for Windows and Linux. The CVSS v2 base s...
CVE-2013-6188
HP System Management Homepage (SMH) versions 7.1–7.2.2 are affected by a cross-site request forgery (CSRF) vulnerability that could allow remote attackers to hijack an authenticated session via unknown vectors. HP’s security bulletin notes this alongside a related CVE (CVE-2013-4846 for info disc...
CVE-2014-7874
CVE-2014-7874 is a CSRF vulnerability affecting HP System Management Homepage (SMH) on HP-UX. It impacts SMH before 3.2.3 on HP-UX B.11.23 and before 3.2.8 on HP-UX B.11.31, potentially allowing remote attackers to hijack user authentication via unknown vectors. HP attributes the issue to CSRF an...
CVE-2007-3062
HP System Management Homepage (SMH) is affected by a cross-site scripting (XSS) vulnerability in versions prior to 2.1.2 (Linux and Windows). The vulnerability allows an attacker to inject arbitrary web script or HTML via unspecified vectors to a user’s browser when interacting with SMH web pages...
CVE-2012-5217
HP System Management Homepage (SMH) vulnerability CVE-2012-5217 affects SMH versions prior to 7.2.1. It allows remote attackers to bypass access restrictions and obtain sensitive information via unspecified vectors. This is separate from CVE-2013-2355. HP’s Security Bulletin notes the remediation...
CVE-2013-2355
HP System Management Homepage (SMH) before 7.2.1 allows remote unauthorized access and potential information disclosure. The CVE-2013-2355 entry refers to unspecified vectors but is listed alongside other SMH vulnerabilities; HP’s security bulletin HPSBMU02900 documents the fix by upgrading to SM...
CVE-2013-2360
HP System Management Homepage (SMH) for Linux/Windows is affected up to version 7.2.0; CVE-2013-2360 describes a remote DoS risk for remote—authenticated users via unknown vectors. HP’s Security Bulletin HP-SMH states the fix is SMH v7.2.1 or later to resolve these vulnerabilities. Connected Red ...
CVE-2013-2361
CVE-2013-2361 describes an XSS vulnerability in HP System Management Homepage (SMH) prior to version 7.2.1. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. HP’s security bulletin HPSBMU02900 rev.3 states affected software is SMH before 7.2.1 and no...
CVE-2015-2134
HP System Management Homepage (SMH) prior to version 7.5.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that allows an authenticated remote user to hijack another user’s session and perform actions on behalf of the victim. The HP Security Bulletin HPSBMU03409 (rev.1) lists CVE...
CVE-2017-12550
CVE-2017-12550 affects HPE System Management Homepage (SMH) for Windows and Linux, prior to version 7.6.1. The issue is a local security misconfiguration that, per CVSS data, requires high privileges and is exploitable locally with no user interaction to impact integrity and availability (I:H/A:H...
CVE-2011-3846
CVE-2011-3846 is a CSRF vulnerability in HP System Management Homepage (SMH) 6.2.2.7 that allows remote attackers to hijack administrator sessions and create new admin accounts. Affected component: SMH 6.2.2.7. Impact: partial confidentiality, integrity, and availability affected per CVSS2 vector...
CVE-2013-2363
HP System Management Homepage (SMH) for Linux and Windows is affected up to version 7.2.0; CVE-2013-2363 corresponds to remote disclosure of information via unspecified vectors. The HP security bulletin HPSBMU02900 (rev.3, 2013) notes multiple remote/local vulnerabilities in SMH and lists CVE-201...
CVE-2016-1993
CVE-2016-1993 affects HPE System Management Homepage (SMH) prior to version 7.5.4. The vulnerability allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. The initial description does not specify the exact exploit vectors or affected components ...
CVE-2017-12547
CVE-2017-12547 is a local arbitrary command execution vulnerability in HPE System Management Homepage (SMH) for Windows and Linux prior to version 7.6.1. The published details indicate an in-application vulnerability that could allow an attacker with local access to submit a crafted request to SM...
CVE-2007-4931
HP System Management Homepage (SMH) for Windows, when used with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update. Impact is unknown in the provided documents, and no remediation/fix is stated. Vulnerability details are othe...
CVE-2016-4394
HP System Management Homepage (SMH) vulnerable to CVE-2016-4394: an HSTS bypass allows remote attackers to obtain sensitive information on SMH versions prior to 7.6. The connected OpenVAS/NVT entries corroborate an HSTS-related disclosure vulnerability affecting HP SMH, but detailed technical spe...
CVE-2006-1023
CVE-2006-1023 (HP SMH) : Directory traversal vulnerability in HP System Management Homepage (SMH) for Windows, affecting versions 2.0.0 through 2.1.4. The vulnerability allows remote attackers to access certain files via unspecified vectors. The public documents do not specify the exact exploit m...