CVE-2016-2022

CWE-79 — Cross-site Scripting (XSS)CWE-362 — Race ConditionCWE-416 — Use After FreeCWE-264CWE-284 — Improper Access ControlCWE-119 — Buffer OverflowCWE-77 — Command InjectionCWE-22 — Path Traversal31 documents13 sources
Severity
8.1HIGH
EPSS
0.2%
top 53.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
HP Matrix Operating EnvironmentHP Systems Insight Manager
Timeline
PublishedJun 8
Latest updateJun 10

Description

HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2030.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.2

Affected Packages2 packages

🔴Vulnerability Details

3
GHSA
Cross-site Scripting in FacturaScripts↗2022-06-10
▶
GHSA
GHSA-c83c-3gv9-x376: HPE Systems Insight Manager (SIM) before 7↗2022-05-17
▶
CVEList
CVE-2016-2022: HPE Systems Insight Manager (SIM) before 7↗2016-06-08
▶

📋Vendor Advisories

14
CISA
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability↗2022-05-24
▶
CISA
Apple iOS Memory Corruption Vulnerability↗2022-05-24
▶
CISA
Apple iOS Webkit Memory Corruption Vulnerability↗2022-05-24
▶
CISA
Microsoft Internet Explorer Memory Corruption Vulnerability↗2022-03-28
▶
CISA
Microsoft Windows Kernel Privilege Escalation Vulnerability↗2022-03-28
▶