VendorsHPsystem_management_homepage7.1
Vulnerabilities

HP System Management Homepage 7.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

17CVEs
CVE-2013-6188
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Published 2014-03-14 · Modified
6.8EPSS 0.010
CVE-2014-2641
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
Published 2014-10-02 · Modified
6.0EPSS 0.009
CVE-2013-2355
HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2012-5217.
Published 2013-07-19 · Modified
5.0EPSS 0.035
CVE-2012-5217
HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2355.
Published 2013-07-19 · Modified
5.0EPSS 0.035
CVE-2013-2356
HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2363.
Published 2013-07-19 · Modified
5.0EPSS 0.033
CVE-2013-2363
HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2356.
Published 2013-07-19 · Modified
5.0EPSS 0.033
CVE-2013-4846
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.3 allows remote attackers to obtain sensitive information via unknown vectors.
Published 2014-03-14 · Modified
5.0EPSS 0.022
CVE-2014-2640
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2014-10-02 · Modified
4.3EPSS 0.039
CVE-2013-2361
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2013-07-19 · Modified
4.3EPSS 0.025
CVE-2014-2642
HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
Published 2014-10-02 · Modified
4.3EPSS 0.024
CVE-2013-4821
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors.
Published 2013-09-23 · Modified
4.0EPSS 0.019
CVE-2013-2360
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2359.
Published 2013-07-19 · Modified
4.0EPSS 0.019
CVE-2013-2359
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2360.
Published 2013-07-19 · Modified
4.0EPSS 0.019
CVE-2013-2358
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2359, and CVE-2013-2360.
Published 2013-07-19 · Modified
4.0EPSS 0.019
CVE-2013-2357
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2358, CVE-2013-2359, and CVE-2013-2360.
Published 2013-07-19 · Modified
4.0EPSS 0.019
CVE-2013-2364
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published 2013-07-19 · Modified
3.5EPSS 0.013
CVE-2013-2362
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows local users to cause a denial of service via unknown vectors, aka ZDI-CAN-1676.
Published 2013-07-19 · Modified
2.1EPSS 0.005