An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.
Product
HP Inc matrix operating environment vulnerabilities
34 published CVES affecting HP Inc matrix operating environment, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 34
- Critical
- 2
- High
- 18
- Medium
- 13
- Low
- 1
- Unscored
- 0
- CISA KEV
- 1
Latest HP Inc matrix operating environment CVEs
Newest publication first · page 1 of 2
-
MediumCVSS 4.3 EPSS 0.73%
-
MediumCVSS 4.3 EPSS 0.73%
A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.
-
MediumCVSS 4.3 EPSS 0.73%
A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.
-
MediumCVSS 5.3 EPSS 3.2%
A remote unauthenticated disclosure of information vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.
-
MediumCVSS 6.5 EPSS 1.4%
A remote information disclosure vulnerability in HPE Matrix Operating Environment version v7.6 was found.
-
MediumCVSS 6.5 EPSS 0.98%
A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found.
-
MediumCVSS 5.3 EPSS 1.5%
A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found.
-
MediumCVSS 5.4 EPSS 0.96%
A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found.
-
CVE-2017-5781 A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found.
PublishedHighCVSS 8.8 EPSS 0.73%A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found.
-
MediumCVSS 6.5 EPSS 1.6%
A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found.
-
LowCVSS 3.5 EPSS 0.60%
A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found.
-
HighCVSS 8.8 EPSS 1.2%
A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found.
-
HighCVSS 8.8 EPSS 1.6%
A remote priviledge escalation vulnerability in HPE Matrix Operating Environment version 7.6 was found.
-
MediumCVSS 5.4 EPSS 0.54%
A cross site scripting vulnerability in HPE Matrix Operating Environment version 7.6 was found.
-
MediumCVSS 5.3 EPSS 1.9%
A remote information disclosure vulnerability in HPE Matrix Operating Environment version 7.6 was found.
-
HighCVSS 8.1 EPSS 1.4%
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2029.
-
HighCVSS 8.1 EPSS 2.2%
HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2028.
-
HighCVSS 8.1 EPSS 2.1%
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2022.
-
CriticalCVSS 9.1 EPSS 4.2%
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4358.
-
HighCVSS 8.1 EPSS 2.0%
HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4357.
-
HighCVSS 7.5 EPSS 3.7%
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2026.
-
HighCVSS 7.5 EPSS 3.7%
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2027.
-
HighCVSS 8.1 EPSS 2.4%
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2030.
-
HighCVSS 8.1 EPSS 3.1%
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2022, and CVE-2016-2030.
-
HighCVSS 8.1 EPSS 2.7%
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.