CVE-2016-4371 HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery....
HighCVSS 8.0
EPSS 0.83%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc service manager | = 9.30 | No fix listed |
| HP Inc service manager | = 9.31 | No fix listed |
| HP Inc service manager | = 9.32 | No fix listed |
| HP Inc service manager | = 9.33 | No fix listed |
| HP Inc service manager | = 9.34 | No fix listed |
| HP Inc service manager | = 9.35 | No fix listed |
| HP Inc service manager | = 9.40 | No fix listed |
| HP Inc service manager | = 9.41 | No fix listed |
| HP Inc service manager mobility | = 9.30 | No fix listed |
| HP Inc service manager mobility | = 9.31 | No fix listed |
| HP Inc service manager mobility | = 9.32 | No fix listed |
| HP Inc service manager mobility | = 9.33 | No fix listed |
| HP Inc service manager mobility | = 9.34 | No fix listed |
| HP Inc service manager mobility | = 9.35 | No fix listed |
| HP Inc service manager mobility | = 9.40 | No fix listed |
| HP Inc service manager mobility | = 9.41 | No fix listed |
| HP Inc service manager server | = 9.30 | No fix listed |
| HP Inc service manager server | = 9.31 | No fix listed |
| HP Inc service manager server | = 9.32 | No fix listed |
| HP Inc service manager server | = 9.33 | No fix listed |
| HP Inc service manager server | = 9.34 | No fix listed |
| HP Inc service manager server | = 9.35 | No fix listed |
| HP Inc service manager server | = 9.40 | No fix listed |
| HP Inc service manager server | = 9.41 | No fix listed |
| HP Inc service manager service request catalog | = 9.30 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc service manager service request catalog | = 9.31 | No fix listed |
| HP Inc service manager service request catalog | = 9.32 | No fix listed |
| HP Inc service manager service request catalog | = 9.33 | No fix listed |
| HP Inc service manager service request catalog | = 9.34 | No fix listed |
| HP Inc service manager service request catalog | = 9.35 | No fix listed |
| HP Inc service manager service request catalog | = 9.40 | No fix listed |
| HP Inc service manager service request catalog | = 9.41 | No fix listed |
| HP Inc service manager web client | = 9.30 | No fix listed |
| HP Inc service manager web client | = 9.31 | No fix listed |
| HP Inc service manager web client | = 9.32 | No fix listed |
| HP Inc service manager web client | = 9.33 | No fix listed |
| HP Inc service manager web client | = 9.34 | No fix listed |
| HP Inc service manager web client | = 9.35 | No fix listed |
| HP Inc service manager web client | = 9.40 | No fix listed |
| HP Inc service manager web client | = 9.41 | No fix listed |
| HP Inc service manager windows client | = 9.30 | No fix listed |
| HP Inc service manager windows client | = 9.31 | No fix listed |
| HP Inc service manager windows client | = 9.32 | No fix listed |
| HP Inc service manager windows client | = 9.33 | No fix listed |
| HP Inc service manager windows client | = 9.34 | No fix listed |
| HP Inc service manager windows client | = 9.35 | No fix listed |
| HP Inc service manager windows client | = 9.40 | No fix listed |
| HP Inc service manager windows client | = 9.41 | No fix listed |
References
- h20566.www2.hpe.com vendor-advisory