System Management Homepage Security Vulnerabilities and Issues — System Management Homepage CVE List

Lucene search

HpSystem Management Homepage

9 matches found

CVE•added 2015/06/22 7:59 p.m.•97 views

CVE-2015-3237

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.

6.4CVSS8.1AI score0.02783EPSS

CVE•added 2014/10/02 12:55 a.m.•60 views

CVE-2014-2641

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

6CVSS6.7AI score0.00056EPSS

CVE•added 2016/03/18 10:59 a.m.•52 views

CVE-2016-1994

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors.

6.5CVSS6.4AI score0.00255EPSS

CVE•added 2012/04/12 10:45 a.m.•45 views

CVE-2011-3846

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

6.8CVSS7.3AI score0.00156EPSS

CVE•added 2015/07/21 7:59 p.m.•44 views

CVE-2015-2134

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

6CVSS6.7AI score0.00076EPSS

CVE•added 2016/10/28 9:59 p.m.•43 views

CVE-2016-4394

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue.

6.5CVSS6.7AI score0.00485EPSS

CVE•added 2014/03/14 10:55 a.m.•42 views

CVE-2013-6188

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

6.8CVSS7.1AI score0.0014EPSS

CVE•added 2014/10/19 1:55 a.m.•42 views

CVE-2014-7874

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

6.8CVSS7.3AI score0.00161EPSS

CVE•added 2008/11/04 6:29 p.m.•40 views

CVE-2008-4413

Unspecified vulnerability in HP System Management Homepage (SMH) 2.2.6 and earlier on HP-UX B.11.11 and B.11.23, and SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31, allows local users to gain "unauthorized access" via unknown vectors, possibly related to temporary file permissions.

6.2CVSS6.5AI score0.00051EPSS