SM
Product
System Management Homepage
On CISA KEVExploited in the wild
78
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 11Medium 12Low 0
Watch
Add System Management Homepage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-3576 | – | Jun 14 | ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to… Affected: All versions, or not specified |
| CVE-2012-2016 | – | Jun 29 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive information via unknown vectors Affected: through 7.1.0-16; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2012-2015 | – | Jun 29 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote authenticated users to gain privileges and obtain sensitive information via unknown… Affected: through 7.1.0-16; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2012-2014 | – | Jun 29 | HP System Management Homepage (SMH) before 7.1.1 does not properly validate input, which allows remote authenticated users to have an unspecified impact via unknown vectors Affected: through 7.1.0-16; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2012-2013 | – | Jun 29 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or… Affected: through 7.1.0-16; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2012-2012 | – | Jun 29 | HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain… Affected: through 7.1.0-16; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2012-1993 | – | Apr 18 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows local users to modify data or obtain sensitive information via unknown vectors Affected: through 6.1.0-103; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2012-0135 | – | Apr 18 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows remote authenticated users to cause a denial of service via unknown vectors Affected: through 6.1.0-103; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2011-3846 | – | Apr 12 | Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests… Affected: 6.2.2.7 |
| CVE-2011-1541 | – | Apr 29 | Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote attackers to bypass intended access restrictions, and consequently execute arbitrary… Affected: through 6.2.3.8; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2011-1540 | – | Apr 29 | Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote authenticated users to execute arbitrary code via unknown vectors Affected: through 6.2.3.8; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2010-3284 | – | Sep 24 | Unspecified vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to obtain sensitive information via unknown vectors Affected: through 6.1.0.102; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2010-3283 | – | Sep 24 | Open redirect vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via… Affected: through 6.1.0.102; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2010-3012 | – | Sep 17 | Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: through 6.1; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2010-3011 | – | Sep 17 | CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks… Affected: through 6.1; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2010-3009 | – | Sep 15 | Unspecified vulnerability in HP System Management Homepage (SMH) for Linux 6.0 and 6.1 allows remote authenticated users to obtain sensitive information and gain root privileges… Affected: 6.0; 6.1 |
| CVE-2010-1586 | – | Apr 28 | Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing… Affected: 2.0.0; 2.0.1; 2.0.2; 2.1; 2.1.0-103; 2.1.0-103(a); +24 more |
| CVE-2010-1034 | – | Apr 23 | Unspecified vulnerability in HP System Management Homepage (SMH) 6.0 before 6.0.0-95 on Linux, and 6.0 before 6.0.0.96 on Windows, allows remote authenticated users to obtain… Affected: 6.0; 6.0 |
| CVE-2009-4185 | – | Feb 5 | Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML… Affected: through 3.0.2.77; 2.0.0; 2.0.1; 2.0.2; 2.1; 2.1.0-103; +31 more |
| CVE-2009-1418 | – | May 19 | Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: through 3.0.0-68; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2008-4413 | – | Nov 4 | Unspecified vulnerability in HP System Management Homepage (SMH) 2.2.6 and earlier on HP-UX B.11.11 and B.11.23, and SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31,… Affected: through 2.2.6; 2.0.0; 2.0.1; 2.0.2; 2.1; 2.1.0-103; +34 more |
| CVE-2008-4411 | – | Oct 13 | Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.15.210 on Linux and Windows allows remote attackers to inject arbitrary web script or… Affected: through 2.1.12-200; 2.0.0; 2.0.1; 2.0.2; 2.1; 2.1.0-103; +25 more |
| CVE-2008-1663 | – | Jul 9 | Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or… Affected: 2.1.10; 2.1.11 |
| CVE-2007-4931 | – | Sep 18 | HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active… Affected: 2.0.0; 2.0.1; 2.0.2; 2.1; 2.1.1; 2.1.2; +8 more |
| CVE-2007-3260 | – | Jun 19 | HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated… Affected: through 2.1.8 |
| CVE-2007-3062 | – | Jun 6 | Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or… Affected: 2.0.0; 2.0.1; 2.0.2; 2.1; 2.1.1 |
| CVE-2006-1774 | – | Apr 13 | HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows… Affected: 2.1.3.132 |
| CVE-2006-1023 | – | Mar 7 | Directory traversal vulnerability in HP System Management Homepage (SMH) 2.0.0 through 2.1.4 on Windows allows remote attackers to access certain files via unspecified vectors Affected: 2.0.0; 2.1.4 |