cbcvebase.

Hp System Management Homepage vulnerabilities

77 known vulnerabilities affecting hp/system_management_homepage.

Total CVEs
77
CISA KEV
2
actively exploited
Public exploits
3
Exploited in wild
2
Severity breakdown
CRITICAL10HIGH14MEDIUM48LOW5

Vulnerabilities

Page 4 of 4
CVE-2009-1418P4MEDIUMCVSS 4.3≤ 3.0.0-68v2.0.0+48 more2009-05-19
CVE-2009-1418 [MEDIUM] CWE-79 CVE-2009-1418: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allo Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2009-4185P4MEDIUMCVSS 4.3≤ 3.0.2.77v2.0.0+35 more2010-02-05
CVE-2009-4185 [MEDIUM] CWE-79 CVE-2009-4185: Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage ( Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter.
nvd
CVE-2013-2361P4MEDIUMCVSS 4.3≤ 7.2v7.0+1 more2013-07-22
CVE-2013-2361 [MEDIUM] CWE-79 CVE-2013-2361: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2010-3284P4MEDIUMCVSS 4.3≤ 6.1.0.102v2.0.0+59 more2010-09-24
CVE-2010-3284 [MEDIUM] CWE-200 CVE-2010-3284: Unspecified vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers Unspecified vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to obtain sensitive information via unknown vectors.
nvd
CVE-2013-2359P4MEDIUMCVSS 4.0≤ 7.2v7.0+1 more2013-07-22
CVE-2013-2359 [MEDIUM] CVE-2013-2359: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenti Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2360.
nvd
CVE-2013-2357P4MEDIUMCVSS 4.0≤ 7.2v7.0+1 more2013-07-22
CVE-2013-2357 [MEDIUM] CVE-2013-2357: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenti Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2358, CVE-2013-2359, and CVE-2013-2360.
nvd
CVE-2013-2358P4MEDIUMCVSS 4.0≤ 7.2v7.0+1 more2013-07-22
CVE-2013-2358 [MEDIUM] CVE-2013-2358: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenti Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2359, and CVE-2013-2360.
nvd
CVE-2013-2360P4MEDIUMCVSS 4.0≤ 7.2v7.0+1 more2013-07-22
CVE-2013-2360 [MEDIUM] CVE-2013-2360: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenti Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2359.
nvd
CVE-2010-3012P4MEDIUMCVSS 4.3≤ 6.1v2.0.0+58 more2010-09-17
CVE-2010-3012 [MEDIUM] CVE-2010-3012: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows re Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue was originally assigned CVE-2010-3010 due to a CNA error.
nvd
CVE-2013-4821P4MEDIUMCVSS 4.0≤ 7.2v2.0.0+70 more2013-09-23
CVE-2013-4821 [MEDIUM] CVE-2013-4821: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenti Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors.
nvd
CVE-2010-3283P4MEDIUMCVSS 4.3≤ 6.1.0.102v2.0.0+59 more2010-09-24
CVE-2010-3283 [MEDIUM] CWE-20 CVE-2010-3283: Open redirect vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attacker Open redirect vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
nvd
CVE-2013-2364P4LOWCVSS 3.5≤ 7.2v7.0+1 more2013-07-22
CVE-2013-2364 [LOW] CWE-79 CVE-2013-2364: Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
nvd
CVE-2012-2016P4MEDIUMCVSS 4.9≤ 7.1.0-16v2.0.0+69 more2012-06-29
CVE-2012-2016 [MEDIUM] CVE-2012-2016: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive information via unknown vectors.
nvd
CVE-2012-0135P4LOWCVSS 3.5≤ 6.1.0-103v2.0.0+58 more2012-04-18
CVE-2012-0135 [LOW] CVE-2012-0135: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows remote authentica Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows remote authenticated users to cause a denial of service via unknown vectors.
nvd
CVE-2007-4931P4LOWCVSS 2.1v2.0.0v2.0.1+12 more2007-09-18
CVE-2007-4931 [LOW] CVE-2007-4931: HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Ag HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for OpenSSL.
nvd
CVE-2013-2362P4LOWCVSS 2.1≤ 7.2v7.0+1 more2013-07-22
CVE-2013-2362 [LOW] CVE-2013-2362: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows local users to Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows local users to cause a denial of service via unknown vectors, aka ZDI-CAN-1676.
nvd
CVE-2012-1993P4LOWCVSS 3.2≤ 6.1.0-103v2.0.0+58 more2012-04-18
CVE-2012-1993 [LOW] CVE-2012-1993: Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows local users to mo Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows local users to modify data or obtain sensitive information via unknown vectors.
nvd