Service Manager vulnerabilities | LiveThreat CVE Feed

Product

Service Manager

by HP · last CVE Jun 19, 2016

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities26 In the news0 Timeline

Severity mix

Critical 1High 2Medium 0Low 0

Severity

All severities26 Critical1 High2 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Service Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-1998	9.8	7%	Mar 22	HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the… Affected: 9.30; 9.31; 9.32; 9.33; 9.34; 9.35; +2 more
CVE-2016-4371	8.0	1%	Jun 19	HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct… Affected: 9.30; 9.31; 9.32; 9.33; 9.34; 9.35; +2 more
CVE-2016-2025	7.5	4%	May 30	HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client,… Affected: 9.30; 9.31; 9.32; 9.33; 9.34; 9.35; +2 more
CVE-2014-2634	–	6%	Aug 23	Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or… Affected: 7.21; 9.21; 9.30; 9.31; 9.32; 9.33
CVE-2014-2633	–	2%	Aug 23	Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of… Affected: 7.21; 9.21; 9.30; 9.31; 9.32; 9.33
CVE-2014-2632	–	13%	Aug 23	Unspecified vulnerability in the WebTier component in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors Affected: 7.21; 9.21; 9.30; 9.31; 9.32; 9.33
CVE-2013-6222	–	3%	Aug 23	Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC) components in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote… Affected: 7.21; 9.21; 9.30; 9.31; 9.32; 9.33
CVE-2013-6202	–	2%	Feb 24	Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified… Affected: 9.30; 9.31; 9.32; 9.33
CVE-2013-6198	–	3%	Dec 29	Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script… Affected: 9.20; 9.21
CVE-2013-6197	–	1%	Dec 29	Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown… Affected: 9.20; 9.21
CVE-2013-4844	–	6%	Nov 29	Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execute arbitrary code via unknown vectors Affected: 7.11; 9.21; 9.30; 9.31; 9.32
CVE-2013-4833	–	2%	Oct 16	Cross-site scripting (XSS) vulnerability in HP Service Manager 9.30 through 9.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: 9.30; 9.31; 9.32
CVE-2013-4832	–	1%	Oct 16	HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified vectors Affected: 9.30; 9.31; 9.32
CVE-2013-4831	–	1%	Oct 16	HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authenticated users to obtain sensitive information or modify data via unspecified… Affected: 9.30; 9.31; 9.32
CVE-2013-4830	–	6%	Oct 16	HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" approach Affected: 9.30; 9.31; 9.32
CVE-2013-4808	–	4%	Aug 18	Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31 and Service Center 6.2.8 allows remote attackers to obtain privileged access via unknown vectors Affected: 7.11; 9.21; 9.30; 9.31
CVE-2013-2337	–	2%	Jun 14	Cross-site scripting (XSS) vulnerability in HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to inject arbitrary web script or HTML… Affected: 7.11; 9.21; 9.30; 9.31
CVE-2013-2336	–	2%	Jun 14	HP Service Manager 7.11, 9.21, 9.30, and 9.31, and ServiceCenter 6.2.8, allows remote attackers to obtain sensitive information via unspecified vectors Affected: 7.11; 9.21; 9.30; 9.31
CVE-2011-1863	–	1%	Jun 14	HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allow remote authenticated users to conduct unspecified script injection attacks via unknown vectors Affected: 7.02; 7.11; 9.20; 9.21
CVE-2011-1862	–	2%	Jun 14	Cross-site scripting (XSS) vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to inject arbitrary web script or HTML… Affected: 7.02; 7.11; 9.20; 9.21
CVE-2011-1861	–	2%	Jun 14	Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to modify data or obtain sensitive information via… Affected: 7.02; 7.11; 9.20; 9.21
CVE-2011-1860	–	2%	Jun 14	Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors Affected: 7.02; 7.11; 9.20; 9.21
CVE-2011-1859	–	2%	Jun 14	Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to obtain sensitive information via unknown vectors Affected: 7.02; 7.11; 9.20; 9.21
CVE-2011-1858	–	0%	Jun 14	Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows local users to bypass intended access restrictions via unknown vectors Affected: 7.02; 7.11; 9.20; 9.21
CVE-2011-1857	–	2%	Jun 14	Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote authenticated users to bypass intended access restrictions via… Affected: 7.02; 7.11; 9.20; 9.21
CVE-2008-4415	–	4%	Nov 17	Unspecified vulnerability in HP Service Manager (HPSM) before 7.01.71 allows remote authenticated users to execute arbitrary code via unknown vectors Affected: through 7.0