CVE-2016-4371

HIGH

HPE Service Manager Software <9.40 - Info Disclosure/Privilege Esca...

Title source: llm

Description

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176

Scores

CVSS v3 8.0

EPSS 0.0007

EPSS Percentile 20.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-352

Status published

Products (48)

hp/service_manager 9.30

hp/service_manager 9.31

hp/service_manager 9.32

hp/service_manager 9.33

hp/service_manager 9.34

hp/service_manager 9.35

hp/service_manager 9.40

hp/service_manager 9.41

hp/service_manager_mobility 9.30

hp/service_manager_mobility 9.31

... and 38 more

Published Jun 19, 2016

Tracked Since Feb 18, 2026