TI-2016-07011 Aliases CVE-2016-8513 GHSA-xc5j-8g2f-8j8q

Cross-site request forgery in Hewlett Packard Enterprise Version Control Repository…

LOW 36CWE-352Published 2018-02-15 · Updated 2024-09-16

Key facts

Attack vector: Network
Privileges required: Low
User interaction: Required
Attack complexity: Low
Impact type: Tampering
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-352.

Summary

A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.

Why it matters now

EPSS 0.0068 52nd percentileScored 2026-11-07

Fix Fixed Version Control Repository Manager (VCRM) (Hewlett Packard Enterprise): 7.6

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Hewlett Packard Enterprise	Version Control Repository Manager (VCRM)	before 7.6	7.6	Patch available	CNA

Version Control Repository Manager (VCRM) VendorHewlett Packard Enterprise Affected before 7.6 Fixed in 7.6 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:hp:version_control_repository_manager::::::::	before 7.6	Vulnerable	Hewlett Packard Enterprise

cpe:2.3:a:hp:version_control_repository_manager:*:*:*:*:*:*:*:* Versions before 7.6 Vulnerable ·Hewlett Packard Enterprise

Remediation

Fix · CNA Version Control Repository Manager (VCRM) (Hewlett Packard Enterprise) Fixed in 7.6

Timeline

2026-10-02 Threatist record created from CVE-2016-8513
2026-10-03 Alias added: GHSA-xc5j-8g2f-8j8q

References

Advisory 2

TI-2015-02747 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x… KEVCVSS 3.1CRITICAL 9.8
TI-2015-07113 Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before… KEVCVSS 3.1HIGH 8.8
TI-2016-07013 Unrestricted file upload in Hewlett Packard Enterprise Version Control Repository Manager CVSS 3.0HIGH 8.8
TI-2015-04551 Buffer overflow in HP Version Control Repository Manager (VCRM) before 7.5.0 allows… CVSS 2.0HIGH 7.5
TI-2015-04553 HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated… CVSS 2.0MEDIUM 6.8
TI-2015-04552 HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated… CVSS 2.0MEDIUM 6.5

See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences