SM
Product
System Management Homepage
On CISA KEVExploited in the wild
78
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 11Medium 12Low 0
Watch
Add System Management Homepage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4394 | 6.5 | Oct 28 | HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue Affected: through 7.5.5.0 |
| CVE-2016-1994 | 6.5 | Mar 18 | HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors Affected: through 7.5.3.1 |
| CVE-2017-12553 | 5.6 | Feb 15 | A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12552 | 5.6 | Feb 15 | A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12551 | 5.6 | Feb 15 | A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12550 | 5.6 | Feb 15 | A local security misconfiguration vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12549 | 5.6 | Feb 15 | A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12548 | 5.6 | Feb 15 | A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12547 | 5.6 | Feb 15 | A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12546 | 5.6 | Feb 15 | A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12544 | 5.4 | Feb 15 | A cross-site scripting vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2016-4393 | 5.4 | Oct 28 | HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue Affected: through 7.5.5.0 |
Showing 12