High severity · published Jun 8, 2016
CVE-2016-4367
The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensitive information via unspecified vectors
7.5
CVSS
7.5%
EPSS
No
On KEV
Description
The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)7.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UC
Universal Cmbd Foundation · HP
10.0; 10.01; 10.10; 10.11; 10.20; 10.21 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-4367
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-4367
Third Party Advisory
http://www.securitytracker.com/id/1036050
Vendor Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05164813
More from Universal Cmbd Foundation
9.8
CVE-2016-4368
HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute…
8.8
CVE-2020-11853
Arbitrary code execution vulnerability affecting multiple Micro Focus products
7.4
CVE-2016-2001
HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified…