CVE-2016-4394
MEDIUMHPE System Management Homepage <7.6 - Info Disclosure
Title source: llmDescription
HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/93961
Vendor Advisory x_refsource_confirm
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
Vendor Advisory x_refsource_confirm
https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149
Scores
CVSS v3
6.5
EPSS
0.0049
EPSS Percentile
65.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Details
CWE
CWE-254
Status
published
Products (2)
hp/system_management_homepage
< 7.5.5.0
HPE/HPE System Management Homepage before v7.6
HPE System Management Homepage before v7.6
Published
Oct 28, 2016
Tracked Since
Feb 18, 2026