Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-4371

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.

Published

2016-06-19T01:59:07.247

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 8.0 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.8

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-352
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hp service_manager 9.30 Yes
Application hp service_manager 9.31 Yes
Application hp service_manager 9.32 Yes
Application hp service_manager 9.33 Yes
Application hp service_manager 9.34 Yes
Application hp service_manager 9.35 Yes
Application hp service_manager 9.40 Yes
Application hp service_manager 9.41 Yes
Application hp service_manager_mobility 9.30 Yes
Application hp service_manager_mobility 9.31 Yes
Application hp service_manager_mobility 9.32 Yes
Application hp service_manager_mobility 9.33 Yes
Application hp service_manager_mobility 9.34 Yes
Application hp service_manager_mobility 9.35 Yes
Application hp service_manager_mobility 9.40 Yes
Application hp service_manager_mobility 9.41 Yes
Application hp service_manager_server 9.30 Yes
Application hp service_manager_server 9.31 Yes
Application hp service_manager_server 9.32 Yes
Application hp service_manager_server 9.33 Yes
Application hp service_manager_server 9.34 Yes
Application hp service_manager_server 9.35 Yes
Application hp service_manager_server 9.40 Yes
Application hp service_manager_server 9.41 Yes
Application hp service_manager_service_request_catalog 9.30 Yes
Application hp service_manager_service_request_catalog 9.31 Yes
Application hp service_manager_service_request_catalog 9.32 Yes
Application hp service_manager_service_request_catalog 9.33 Yes
Application hp service_manager_service_request_catalog 9.34 Yes
Application hp service_manager_service_request_catalog 9.35 Yes
Application hp service_manager_service_request_catalog 9.40 Yes
Application hp service_manager_service_request_catalog 9.41 Yes
Application hp service_manager_web_client 9.30 Yes
Application hp service_manager_web_client 9.31 Yes
Application hp service_manager_web_client 9.32 Yes
Application hp service_manager_web_client 9.33 Yes
Application hp service_manager_web_client 9.34 Yes
Application hp service_manager_web_client 9.35 Yes
Application hp service_manager_web_client 9.40 Yes
Application hp service_manager_web_client 9.41 Yes
Application hp service_manager_windows_client 9.30 Yes
Application hp service_manager_windows_client 9.31 Yes
Application hp service_manager_windows_client 9.32 Yes
Application hp service_manager_windows_client 9.33 Yes
Application hp service_manager_windows_client 9.34 Yes
Application hp service_manager_windows_client 9.35 Yes
Application hp service_manager_windows_client 9.40 Yes
Application hp service_manager_windows_client 9.41 Yes
References