Vulnerabilities

Filters

Reset all

2 selected

78 records

Sort

Vendor: Hewlett Packard Enterprise Component: System Management Homepage Clear all filters

TI-2023-27498 CVE-2023-50271 · GHSA-5wr2-8999-crcx

HP-UX System Management Homepage, Disclosure of Information

LOW 33

A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00499 Published 2023-12-17 No fix listed CWE-200

TI-2017-09284 CVE-2017-12553 · GHSA-xccx-gx74-gxr4

A local authentication bypass vulnerability in HPE System Management Homepage for Windows…

LOW 25

A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

CVSS 3.0MEDIUM 5.6 Local High privileges User interaction EPSS 0.0031 Published 2018-02-15 Fixed in 7.6.1

TI-2017-09283 CVE-2017-12552 · GHSA-6268-pphq-g7c6

A local arbitrary execution of commands vulnerability in HPE System Management Homepage…

LOW 25

A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

CVSS 3.0MEDIUM 5.6 Local High privileges User interaction EPSS 0.00409 Published 2018-02-15 Fixed in 7.6.1

TI-2017-09282 CVE-2017-12551 · GHSA-89q8-c9q8-frc8

A local arbitrary execution of commands vulnerability in HPE System Management Homepage…

LOW 26

A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

CVSS 3.0MEDIUM 5.6 Local High privileges User interaction EPSS 0.00447 Published 2018-02-15 No fix listed

TI-2017-09281 CVE-2017-12550 · GHSA-rxf2-xmg7-5jvp

A local security misconfiguration vulnerability in HPE System Management Homepage for…

LOW 25

A local security misconfiguration vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

CVSS 3.0MEDIUM 5.6 Local High privileges User interaction EPSS 0.00311 Published 2018-02-15 Fixed in 7.6.1

TI-2017-09280 CVE-2017-12549 · GHSA-h7mp-8hcg-j2mc

Improper authentication in Hewlett Packard Enterprise System Management Homepage for…

LOW 25

A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

CVSS 3.0MEDIUM 5.6 Local High privileges User interaction EPSS 0.0031 Published 2018-02-15 Fixed in 7.6.1 CWE-287

TI-2017-09279 CVE-2017-12548 · GHSA-xhj4-2px5-xqfv

A local arbitrary command execution vulnerability in HPE System Management Homepage for…

LOW 25

A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

CVSS 3.0MEDIUM 5.6 Local High privileges User interaction EPSS 0.00408 Published 2018-02-15 Fixed in 7.6.1

TI-2017-09278 CVE-2017-12547 · GHSA-9g7g-p59x-mjf4

A local arbitrary command execution vulnerability in HPE System Management Homepage for…

LOW 25

A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

CVSS 3.0MEDIUM 5.6 Local High privileges User interaction EPSS 0.00408 Published 2018-02-15 Fixed in 7.6.1

TI-2017-09277 CVE-2017-12546 · GHSA-5r58-px4m-m53p

Memory corruption in Hewlett Packard Enterprise System Management Homepage for Windows…

LOW 25

A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

CVSS 3.0MEDIUM 5.6 Local High privileges User interaction EPSS 0.00346 Published 2018-02-15 Fixed in 7.6.1 CWE-119

TI-2017-09276 CVE-2017-12545 · GHSA-7qqr-h7vr-jr47

NULL pointer dereference in Hewlett Packard Enterprise System Management Homepage for…

MEDIUM 42

A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.06569 Published 2018-02-15 Fixed in 7.6.1 CWE-476

TI-2017-09275 CVE-2017-12544 · GHSA-9w8p-qh5m-p38x

Cross-site scripting in Hewlett Packard Enterprise System Management Homepage for Windows…

LOW 32

A cross-site scripting vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.04515 Published 2018-02-15 Fixed in 7.6.1 CWE-79

TI-2016-03778 CVE-2016-4396 · GHSA-6g4m-f8vp-w5pp

Memory corruption in Hewlett Packard Enterprise (HPE) HPE System Management Homepage…

MEDIUM 40

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04111 Published 2016-10-28 No fix listed CWE-119

TI-2016-03777 CVE-2016-4395 · GHSA-7q43-2mpm-j482

Memory corruption in Hewlett Packard Enterprise (HPE) HPE System Management Homepage…

LOW 39

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03873 Published 2016-10-28 No fix listed CWE-119

TI-2016-03776 CVE-2016-4394 · GHSA-jrxr-w99j-7ghc

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive…

LOW 34

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.0265 Published 2016-10-28 No fix listed CWE-254

TI-2016-03775 CVE-2016-4393 · GHSA-2565-pm5h-w9cc

Cross-site scripting in Hewlett Packard Enterprise (HPE) HPE System Management Homepage…

LOW 27

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01163 Published 2016-10-28 No fix listed CWE-79

TI-2016-04667 CVE-2016-5388 · GHSA-v646-rx6w-r3qq

Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled…

HIGH 67

Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.50896 Published 2016-07-19 Partial fix · 7.0.72, 8.5.5 CWE-284

TI-2016-04666 CVE-2016-5387 · GHSA-9hqr-6p2v-pfp2

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does…

HIGH 68

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remot…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.55724 Published 2016-07-19 Partial fix

TI-2016-04664 CVE-2016-5385

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts…

HIGH 66

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, whi…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.50427 Published 2016-07-19 Partial fix CWE-601

TI-2016-03912 CVE-2016-4543 · GHSA-rq9w-g95x-fggp

The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x…

MEDIUM 56

The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bou…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.1186 Published 2016-05-22 Partial fix CWE-119

TI-2016-01848 CVE-2016-2015 · GHSA-54x6-hj78-x95f

HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive…

LOW 32

HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors.

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00486 Published 2016-05-14 No fix listed CWE-200

TI-2016-01829 CVE-2016-1996 · GHSA-4cf2-m45x-5phh

HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive…

LOW 34

HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors.

CVSS 3.0HIGH 7.7 Local No auth No interaction EPSS 0.00542 Published 2016-03-18 No fix listed

TI-2016-01828 CVE-2016-1995 · GHSA-wv65-hrgx-qw8p

HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.

MEDIUM 55

HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10238 Published 2016-03-18 No fix listed

TI-2016-01827 CVE-2016-1994 · GHSA-jx7q-f9m8-g9pq

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain…

LOW 33

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01917 Published 2016-03-18 No fix listed CWE-200

TI-2016-01826 CVE-2016-1993 · GHSA-xq9g-p9vj-39jw

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain…

LOW 39

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01956 Published 2016-03-18 No fix listed

TI-2015-07113 CVE-2015-8651 · GHSA-8p63-f9jh-3gch

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before…

CRITICAL 97KEV

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe A…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.67698 Published 2015-12-28 Fixed CWE-190