Unscored severity · published Oct 23, 2010
CVE-2010-3288
Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication of unspecified victims via…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Systems Insight Manager · HP
through 6.1; 4.0; 4.1; 4.1; 4.2; 4.2; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3288
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3288
Vendor Advisory
http://marc.info/?l=bugtraq&m=128768031706686&w=2
www.securitytracker.com
http://www.securitytracker.com/id?1024622
More from Systems Insight Manager
9.8
CVE-2015-3113
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
8.8
CVE-2015-8651
Adobe Flash Player Integer Overflow Vulnerability
9.8
CVE-2020-7200
A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6
9.8
CVE-2016-4366
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors
9.1
CVE-2016-2029
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than…