CVE-2016-4371

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
VendorProductVersion
hpservice_manager
9.30
hpservice_manager
9.31
hpservice_manager
9.32
hpservice_manager
9.33
hpservice_manager
9.34
hpservice_manager
9.35
hpservice_manager
9.40
hpservice_manager
9.41
hpservice_manager_mobility
9.30
hpservice_manager_mobility
9.31
hpservice_manager_mobility
9.32
hpservice_manager_mobility
9.33
hpservice_manager_mobility
9.34
hpservice_manager_mobility
9.35
hpservice_manager_mobility
9.40
hpservice_manager_mobility
9.41
hpservice_manager_server
9.30
hpservice_manager_server
9.31
hpservice_manager_server
9.32
hpservice_manager_server
9.33
hpservice_manager_server
9.34
hpservice_manager_server
9.35
hpservice_manager_server
9.40
hpservice_manager_server
9.41
hpservice_manager_service_request_catalog
9.30
hpservice_manager_service_request_catalog
9.31
hpservice_manager_service_request_catalog
9.32
hpservice_manager_service_request_catalog
9.33
hpservice_manager_service_request_catalog
9.34
hpservice_manager_service_request_catalog
9.35
hpservice_manager_service_request_catalog
9.40
hpservice_manager_service_request_catalog
9.41
hpservice_manager_web_client
9.30
hpservice_manager_web_client
9.31
hpservice_manager_web_client
9.32
hpservice_manager_web_client
9.33
hpservice_manager_web_client
9.34
hpservice_manager_web_client
9.35
hpservice_manager_web_client
9.40
hpservice_manager_web_client
9.41
hpservice_manager_windows_client
9.30
hpservice_manager_windows_client
9.31
hpservice_manager_windows_client
9.32
hpservice_manager_windows_client
9.33
hpservice_manager_windows_client
9.34
hpservice_manager_windows_client
9.35
hpservice_manager_windows_client
9.40
hpservice_manager_windows_client
9.41
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176