CVE-2016-4370

HIGH

HPE Project and Portfolio Management Center 9.2x-9.3x - Authenticated Remote Code Execution or Information Disclosure

Title source: manual

Description

HPE Project and Portfolio Management Center (PPM) 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to execute arbitrary commands or obtain sensitive information via unspecified vectors.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167126

Scores

CVSS v3 8.8

EPSS 0.0088

EPSS Percentile 75.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published

Products (6)

hpe/project_and_portfolio_management_center 9.20

hpe/project_and_portfolio_management_center 9.21

hpe/project_and_portfolio_management_center 9.22

hpe/project_and_portfolio_management_center 9.30

hpe/project_and_portfolio_management_center 9.31

hpe/project_and_portfolio_management_center 9.32

Published Jun 09, 2016

Tracked Since Feb 18, 2026