Hp Service Manager vulnerabilities

26 known vulnerabilities affecting hp/service_manager.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL5HIGH7MEDIUM14

Vulnerabilities

Page 1 of 2

CVE-2016-4371HIGHCVSS 8.0v9.30v9.31+6 more2016-06-19

CVE-2016-4371 [HIGH] CWE-352 CVE-2016-4371: HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authen HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.

nvd

CVE-2016-2025HIGHCVSS 7.5v9.30v9.31+6 more2016-05-30

CVE-2016-2025 [HIGH] CWE-200 CVE-2016-2025: HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to ob HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components.

nvd

CVE-2016-1998CRITICALCVSS 9.8v9.30v9.31+6 more2016-03-22

CVE-2016-1998 [CRITICAL] CWE-20 CVE-2016-1998: HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to exec HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

nvd

CVE-2014-2634CRITICALCVSS 9.4v7.21v9.21+4 more2014-08-23

CVE-2014-2634 [CRITICAL] CVE-2014-2634: Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows r Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors.

nvd

CVE-2014-2632CRITICALCVSS 10.0v7.21v9.21+4 more2014-08-23

CVE-2014-2632 [CRITICAL] CVE-2014-2632: Unspecified vulnerability in the WebTier component in HP Service Manager (SM) 7.21 and 9.x before 9. Unspecified vulnerability in the WebTier component in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors.

nvd

CVE-2014-2633MEDIUMCVSS 6.8v7.21v9.21+4 more2014-08-23

CVE-2014-2633 [MEDIUM] CWE-352 CVE-2014-2633: Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9. Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

nvd

CVE-2013-6222MEDIUMCVSS 4.3v7.21v9.21+4 more2014-08-23

CVE-2013-6222 [MEDIUM] CWE-79 CVE-2013-6222: Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC) components in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2013-6202MEDIUMCVSS 6.8v9.30v9.31+2 more2014-02-24

CVE-2013-6202 [MEDIUM] CWE-352 CVE-2013-6202: Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, a Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) insert XSS sequences or (2) execute arbitrary code.

nvd

CVE-2013-6197MEDIUMCVSS 5.2v9.20v9.212013-12-29

CVE-2013-6197 [MEDIUM] CVE-2013-6197: Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21 Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors.

nvd

CVE-2013-6198MEDIUMCVSS 4.3v9.20v9.212013-12-29

CVE-2013-6198 [MEDIUM] CWE-79 CVE-2013-6198: Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9 Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2013-4844HIGHCVSS 7.5v7.11v9.21+3 more2013-11-29

CVE-2013-4844 [HIGH] CVE-2013-4844: Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execute arbitrary code via unknown vectors.

nvd

CVE-2013-4830HIGHCVSS 7.5v9.30v9.31+1 more2013-10-16

CVE-2013-4830 [HIGH] CWE-94 CVE-2013-4830: HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspec HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" approach.

nvd

CVE-2013-4832MEDIUMCVSS 4.0v9.30v9.31+1 more2013-10-16

CVE-2013-4832 [MEDIUM] CWE-200 CVE-2013-4832: HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive informati HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified vectors.

nvd

CVE-2013-4831MEDIUMCVSS 5.5v9.30v9.31+1 more2013-10-16

CVE-2013-4831 [MEDIUM] CVE-2013-4831: HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authen HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

nvd

CVE-2013-4833MEDIUMCVSS 4.3v9.30v9.31+1 more2013-10-16

CVE-2013-4833 [MEDIUM] CWE-79 CVE-2013-4833: Cross-site scripting (XSS) vulnerability in HP Service Manager 9.30 through 9.32 allows remote attac Cross-site scripting (XSS) vulnerability in HP Service Manager 9.30 through 9.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2013-4808CRITICALCVSS 10.0v7.11v9.21+2 more2013-08-18

CVE-2013-4808 [CRITICAL] CVE-2013-4808: Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31 and Service Center 6.2.8 Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31 and Service Center 6.2.8 allows remote attackers to obtain privileged access via unknown vectors.

nvd

CVE-2013-2336MEDIUMCVSS 5.0v7.11v9.21+2 more2013-06-14

CVE-2013-2336 [MEDIUM] CVE-2013-2336: HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to o HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to obtain sensitive information via unspecified vectors.

nvd

CVE-2013-2337MEDIUMCVSS 4.3v7.11v9.21+2 more2013-06-14

CVE-2013-2337 [MEDIUM] CWE-79 CVE-2013-2337: Cross-site scripting (XSS) vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31, and Servi Cross-site scripting (XSS) vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2011-1857HIGHCVSS 8.2v7.02v7.11+2 more2011-06-14

CVE-2011-1857 [HIGH] CVE-2011-1857: Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote authenticated users to bypass intended access restrictions via unknown vectors.

nvd

CVE-2011-1863HIGHCVSS 7.5v7.02v7.11+2 more2011-06-14

CVE-2011-1863 [HIGH] CWE-94 CVE-2011-1863: HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allow remote authenticated us HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allow remote authenticated users to conduct unspecified script injection attacks via unknown vectors.

nvd

1 / 2Next →