Hewlett Packard Enterprise

Records2515All Threatist records

Exploited (KEV)7In CISA KEV

CVSS critical598CVSS 9.0–10.0

CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2015-07113 Adobe Flash Player Integer Overflow Vulnerability CRITICAL 97KEV 2022-05-25 TI-2015-02747 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability CRITICAL 100KEV 2022-04-13 TI-2005-02634 HP OpenView Network Node Manager Remote Code Execution Vulnerability CRITICAL 100KEV 2022-03-25 TI-2012-01607 PHP-CGI Query String Parameter Vulnerability CRITICAL 100KEV 2022-03-25 TI-2013-04219 HP Multiple Products Remote Code Execution Vulnerability CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Intelligent Management Center 310 records HIGH Hp-ux 289 records CRITICAL Openview Network Node Manager 80 records CRITICAL System Management Homepage 78 records CRITICAL Instantos 56 records MEDIUM Xp7 Command View 53 records MEDIUM Systems Insight Manager 50 records CRITICAL Matrix Operating Environment 34 records CRITICAL

Records

26 records in Service Manager · all components

TI-2014-02115 CVE-2014-2632 · GHSA-69pq-8qcx-5xj5

Unspecified vulnerability in the WebTier component in HP Service Manager (SM) 7.21 and…

MEDIUM 58

Unspecified vulnerability in the WebTier component in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.13341 Published 2014-08-23 No fix listed

TI-2016-01831 CVE-2016-1998 · GHSA-w227-q5p9-mh2c

HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote…

MEDIUM 52

HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06778 Published 2016-03-22 No fix listed CWE-20

TI-2014-02117 CVE-2014-2634 · GHSA-885m-r7jw-fhxm

Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before…

MEDIUM 50

Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vector…

CVSS 2.0HIGH 9.4 Network No auth Interaction — EPSS 0.0641 Published 2014-08-23 No fix listed

TI-2013-04217 CVE-2013-4808 · GHSA-2c4w-qc68-vvg4

Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31 and Service…

MEDIUM 50

Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31 and Service Center 6.2.8 allows remote attackers to obtain privileged access via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04394 Published 2013-08-18 No fix listed

TI-2008-04212 CVE-2008-4415 · GHSA-c3qm-3j85-q4w6

Unspecified vulnerability in HP Service Manager (HPSM) before 7.01.71 allows remote…

MEDIUM 45

Unspecified vulnerability in HP Service Manager (HPSM) before 7.01.71 allows remote authenticated users to execute arbitrary code via unknown vectors.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03577 Published 2008-11-17 No fix listed CWE-264

TI-2013-04252 CVE-2013-4844 · GHSA-h3pv-28qq-49rr

Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and…

MEDIUM 41

Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execute arbitrary code via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05536 Published 2013-11-29 No fix listed

TI-2013-04238 CVE-2013-4830 · GHSA-hj6m-pf25-4mm6

HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code…

MEDIUM 41

HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" approach.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05585 Published 2013-10-16 No fix listed CWE-94

TI-2011-01637 CVE-2011-1861 · GHSA-jrf2-626v-253x

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service…

MEDIUM 41

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to modify data or obtain sensitive information via unknown vectors.

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.02313 Published 2011-06-14 No fix listed

TI-2016-01858 CVE-2016-2025 · GHSA-76gp-rwc5-4h59

HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote…

LOW 39

HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility com…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03529 Published 2016-05-30 No fix listed CWE-200

TI-2011-01633 CVE-2011-1857 · GHSA-m8wf-mm8p-m4mr

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service…

LOW 39

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote authenticated users to bypass intended access restrictions via unknown vectors.

CVSS 2.0HIGH 8.2 Network Low privileges Interaction — EPSS 0.01562 Published 2011-06-14 No fix listed

TI-2016-03753 CVE-2016-4371 · GHSA-jc27-5527-jx5m

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows…

LOW 36

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via u…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.00832 Published 2016-06-19 No fix listed CWE-352

TI-2011-01639 CVE-2011-1863 · GHSA-gv73-3v96-pq6f

HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allow remote…

LOW 36

HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allow remote authenticated users to conduct unspecified script injection attacks via unknown vectors.

CVSS 2.0HIGH 7.5 Network Low privileges Interaction — EPSS 0.01364 Published 2011-06-14 No fix listed CWE-94

TI-2014-02116 CVE-2014-2633 · GHSA-2qg5-93x8-p5q3

Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM)…

LOW 34

Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.018 Published 2014-08-23 No fix listed CWE-352

TI-2013-05215 CVE-2013-6202 · GHSA-h2fp-369j-gmwq

Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30…

LOW 34

Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) insert XSS sequ…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02284 Published 2014-02-24 No fix listed CWE-352

TI-2013-04239 CVE-2013-4831 · GHSA-fj49-hv73-43xr

HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows…

LOW 27

HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01137 Published 2013-10-16 No fix listed

TI-2013-02084 CVE-2013-2336 · GHSA-fjgr-4v7p-jrqh

HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote…

LOW 27

HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to obtain sensitive information via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02202 Published 2013-06-14 No fix listed

TI-2011-01636 CVE-2011-1860 · GHSA-jjp2-5wrp-96x7

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service…

LOW 27

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02331 Published 2011-06-14 No fix listed

TI-2011-01635 CVE-2011-1859 · GHSA-p93p-h47j-hj8j

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service…

LOW 27

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to obtain sensitive information via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02331 Published 2011-06-14 No fix listed

TI-2013-05234 CVE-2013-6222 · GHSA-f5c2-732g-c3qf

Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request…

LOW 26

Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC) components in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0341 Published 2014-08-23 No fix listed CWE-79

TI-2013-05212 CVE-2013-6198 · GHSA-h8g8-f8qf-7h4h

Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client…

LOW 25

Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02639 Published 2013-12-29 No fix listed CWE-79

TI-2013-05211 CVE-2013-6197 · GHSA-qmwq-g6wj-vpwj

Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21…

LOW 25

Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors.

CVSS 2.0MEDIUM 5.2 Adjacent network Low privileges Interaction — EPSS 0.00842 Published 2013-12-29 No fix listed

TI-2011-01638 CVE-2011-1862 · GHSA-5hv9-93p8-hw48

Cross-site scripting (XSS) vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21…

LOW 24

Cross-site scripting (XSS) vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01842 Published 2011-06-14 No fix listed CWE-79

TI-2013-04241 CVE-2013-4833 · GHSA-3wgm-5fw2-jv64

Cross-site scripting (XSS) vulnerability in HP Service Manager 9.30 through 9.32 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in HP Service Manager 9.30 through 9.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0163 Published 2013-10-16 No fix listed CWE-79

TI-2013-02085 CVE-2013-2337 · GHSA-hvhj-g9gq-j259

Cross-site scripting (XSS) vulnerability in HP Service Manager 7.11, 9.21, 9.30, and…

LOW 23

Cross-site scripting (XSS) vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0163 Published 2013-06-14 No fix listed CWE-79

TI-2013-04240 CVE-2013-4832 · GHSA-qfx3-655j-fcwq

HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain…

LOW 21

HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified vectors.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01145 Published 2013-10-16 No fix listed CWE-200

Open these records in search →

Critical	598
High	951
Medium	866
Low	100
No CVSS	0