8
CVE-2016-4371
- EPSS 0.07%
- Published 19.06.2016 01:59:07
- Last modified 12.04.2025 10:46:40
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.
Data is provided by the National Vulnerability Database (NVD)
Hp ≫ Service Manager Version9.30
Hp ≫ Service Manager Version9.31
Hp ≫ Service Manager Version9.32
Hp ≫ Service Manager Version9.33
Hp ≫ Service Manager Version9.34
Hp ≫ Service Manager Version9.35
Hp ≫ Service Manager Version9.40
Hp ≫ Service Manager Version9.41
Hp ≫ Service Manager Mobility Version9.30
Hp ≫ Service Manager Mobility Version9.31
Hp ≫ Service Manager Mobility Version9.32
Hp ≫ Service Manager Mobility Version9.33
Hp ≫ Service Manager Mobility Version9.34
Hp ≫ Service Manager Mobility Version9.35
Hp ≫ Service Manager Mobility Version9.40
Hp ≫ Service Manager Mobility Version9.41
Hp ≫ Service Manager Server Version9.30
Hp ≫ Service Manager Server Version9.31
Hp ≫ Service Manager Server Version9.32
Hp ≫ Service Manager Server Version9.33
Hp ≫ Service Manager Server Version9.34
Hp ≫ Service Manager Server Version9.35
Hp ≫ Service Manager Server Version9.40
Hp ≫ Service Manager Server Version9.41
Hp ≫ Service Manager Service Request Catalog Version9.30
Hp ≫ Service Manager Service Request Catalog Version9.31
Hp ≫ Service Manager Service Request Catalog Version9.32
Hp ≫ Service Manager Service Request Catalog Version9.33
Hp ≫ Service Manager Service Request Catalog Version9.34
Hp ≫ Service Manager Service Request Catalog Version9.35
Hp ≫ Service Manager Service Request Catalog Version9.40
Hp ≫ Service Manager Service Request Catalog Version9.41
Hp ≫ Service Manager Web Client Version9.30
Hp ≫ Service Manager Web Client Version9.31
Hp ≫ Service Manager Web Client Version9.32
Hp ≫ Service Manager Web Client Version9.33
Hp ≫ Service Manager Web Client Version9.34
Hp ≫ Service Manager Web Client Version9.35
Hp ≫ Service Manager Web Client Version9.40
Hp ≫ Service Manager Web Client Version9.41
Hp ≫ Service Manager Windows Client Version9.30
Hp ≫ Service Manager Windows Client Version9.31
Hp ≫ Service Manager Windows Client Version9.32
Hp ≫ Service Manager Windows Client Version9.33
Hp ≫ Service Manager Windows Client Version9.34
Hp ≫ Service Manager Windows Client Version9.35
Hp ≫ Service Manager Windows Client Version9.40
Hp ≫ Service Manager Windows Client Version9.41
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.178 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 8 | 2.1 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6 | 6.8 | 6.4 |
AV:N/AC:M/Au:S/C:P/I:P/A:P
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.