4.3
CVE-2010-1586
- EPSS 0.52%
- Published 28.04.2010 22:30:00
- Last modified 11.04.2025 00:51:21
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter.
Data is provided by the National Vulnerability Database (NVD)
Hp ≫ System Management Homepage Version2.0.0
Hp ≫ System Management Homepage Version2.0.1
Hp ≫ System Management Homepage Version2.0.2
Hp ≫ System Management Homepage Version2.1
Hp ≫ System Management Homepage Version2.1.0-103
Hp ≫ System Management Homepage Version2.1.0-109
Hp ≫ System Management Homepage Version2.1.0-118
Hp ≫ System Management Homepage Version2.1.1
Hp ≫ System Management Homepage Version2.1.2
Hp ≫ System Management Homepage Version2.1.2-127
Hp ≫ System Management Homepage Version2.1.3
Hp ≫ System Management Homepage Version2.1.3.132
Hp ≫ System Management Homepage Version2.1.4
Hp ≫ System Management Homepage Version2.1.5
Hp ≫ System Management Homepage Version2.1.5-146
Hp ≫ System Management Homepage Version2.1.6
Hp ≫ System Management Homepage Version2.1.6-156
Hp ≫ System Management Homepage Version2.1.7
Hp ≫ System Management Homepage Version2.1.7-168
Hp ≫ System Management Homepage Version2.1.8
Hp ≫ System Management Homepage Version2.1.8-177
Hp ≫ System Management Homepage Version2.1.9
Hp ≫ System Management Homepage Version2.1.9-178
Hp ≫ System Management Homepage Version2.1.10-186
Hp ≫ System Management Homepage Version2.1.11-197
Hp ≫ System Management Homepage Version2.1.12-118
Hp ≫ System Management Homepage Version2.1.12-200
Hp ≫ System Management Homepage Version2.2.6
Hp ≫ System Management Homepage Version2.2.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.52% | 0.66 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.