CVE-2013-6188
published 2014-03-14CVE-2013-6188: Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication…
PriorityP425medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
0.98%
58.6th percentile
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hp | system_management_homepage | — | — |
| hp | system_management_homepage | — | — |
| hp | system_management_homepage | — | — |
| hp | system_management_homepage | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
HP System Management Homepage up to 7.2.1 cross-site request forgery (Nessus ID 72959 / XFDB-91750)
vuldb·2026-05-08·CVSS 6.8
CVE-2013-6188 [MEDIUM] HP System Management Homepage up to 7.2.1 cross-site request forgery (Nessus ID 72959 / XFDB-91750)
A vulnerability was found in HP System Management Homepage up to 7.2.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross-site request forgery.
This vulnerability is handled as CVE-2013-6188. The attack can be executed remotely. There is not any exploit available.
GHSA
GHSA-rxgp-7vp4-mcf4: Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7
ghsa_unreviewed·2022-05-13
CVE-2013-6188 [MEDIUM] CWE-352 GHSA-rxgp-7vp4-mcf4: Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-03-14
Published