SM
Product
System Management Homepage
On CISA KEVExploited in the wild
78
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 11Medium 12Low 0
Watch
Add System Management Homepage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-3113 In wildKEV | 9.8 | Jun 23 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Affected: before 7.5.0 |
| CVE-2015-8651 In wildKEV | 8.8 | Dec 28 | Adobe Flash Player Integer Overflow Vulnerability Affected: before 7.6 |
| CVE-2016-4543 | 9.8 | May 22 | The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers… Affected: through 7.5.5.6 |
| CVE-2016-1995 | 9.8 | Mar 18 | HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors Affected: through 7.5.3.1 |
| CVE-2016-5387 | 8.1 | Jul 19 | The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY… Affected: through 7.5.5.0 |
| CVE-2016-5385 | 8.1 | Jul 19 | PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in… Affected: through 7.5.5.0 |
| CVE-2016-5388 | 8.1 | Jul 19 | Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the… Affected: through 7.5.5.0 |
| CVE-2016-1993 | 8.1 | Mar 18 | HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors Affected: through 7.5.3.1 |
| CVE-2016-1996 | 7.7 | Mar 18 | HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors Affected: through 7.5.3.1 |
| CVE-2023-50271 | 7.5 | Dec 17 | A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH) Affected: before a.3.2.23.09 |
| CVE-2017-12545 | 7.5 | Feb 15 | A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2016-4396 | 7.5 | Oct 28 | HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue Affected: through 7.5.5.0 |
| CVE-2016-4395 | 7.5 | Oct 28 | HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue Affected: through 7.5.5.0 |
| CVE-2016-2015 | 7.1 | May 14 | HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors Affected: through 7.5.4.3 |
| CVE-2016-4394 | 6.5 | Oct 28 | HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue Affected: through 7.5.5.0 |
| CVE-2016-1994 | 6.5 | Mar 18 | HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors Affected: through 7.5.3.1 |
| CVE-2017-12553 | 5.6 | Feb 15 | A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12552 | 5.6 | Feb 15 | A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12551 | 5.6 | Feb 15 | A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12550 | 5.6 | Feb 15 | A local security misconfiguration vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12549 | 5.6 | Feb 15 | A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12548 | 5.6 | Feb 15 | A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12547 | 5.6 | Feb 15 | A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12546 | 5.6 | Feb 15 | A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2017-12544 | 5.4 | Feb 15 | A cross-site scripting vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2016-4393 | 5.4 | Oct 28 | HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue Affected: through 7.5.5.0 |
| CVE-2015-2134 | – | Jul 21 | Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified… Affected: through 7.4.0 |
| CVE-2015-3237 | – | Jun 22 | The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service… Affected: through 7.5.3.1 |
| CVE-2015-4024 | – | Jun 9 | Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote… Affected: through 7.5.3.1 |
| CVE-2015-3148 | – | Apr 24 | cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request Affected: through 7.5.3.1 |
| CVE-2015-3145 | – | Apr 24 | The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service… Affected: through 7.5.3.1 |
| CVE-2015-3143 | – | Apr 24 | cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar… Affected: through 7.5.3.1 |
| CVE-2014-7874 | – | Oct 19 | Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to… Affected: through 3.2.2; through 3.2.7 |
| CVE-2014-2642 | – | Oct 2 | HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors Affected: through 7.3; 7.0; 7.1; 7.2; 7.2.1 |
| CVE-2014-2641 | – | Oct 2 | Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified… Affected: through 7.3; 7.0; 7.1; 7.2; 7.2.1 |
| CVE-2014-2640 | – | Oct 2 | Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: through 7.3; 7.0; 7.1; 7.2; 7.2.1 |
| CVE-2013-6188 | – | Mar 14 | Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified… Affected: 7.1; 7.2; 7.2.1; 7.2.2 |
| CVE-2013-4846 | – | Mar 14 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.3 allows remote attackers to obtain sensitive information via unknown vectors Affected: through 7.2.2; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2013-4821 | – | Sep 23 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors Affected: through 7.2; 2.0.0; 2.0.1; 2.0.1.104; 2.0.2; 2.0.2.106; +34 more |
| CVE-2013-2364 | – | Jul 22 | Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via… Affected: through 7.2; 7.0; 7.1 |
| CVE-2013-2363 | – | Jul 22 | HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2356 Affected: through 7.2; 7.0; 7.1 |
| CVE-2013-2362 | – | Jul 22 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows local users to cause a denial of service via unknown vectors, aka ZDI-CAN-1676 Affected: through 7.2; 7.0; 7.1 |
| CVE-2013-2361 | – | Jul 22 | Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: through 7.2; 7.0; 7.1 |
| CVE-2013-2360 | – | Jul 22 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different… Affected: through 7.2; 7.0; 7.1 |
| CVE-2013-2359 | – | Jul 22 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different… Affected: through 7.2; 7.0; 7.1 |
| CVE-2013-2358 | – | Jul 22 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different… Affected: through 7.2; 7.0; 7.1 |
| CVE-2013-2357 | – | Jul 22 | Unspecified vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different… Affected: through 7.2; 7.0; 7.1 |
| CVE-2013-2356 | – | Jul 22 | HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2363 Affected: through 7.2; 7.0; 7.1 |
| CVE-2013-2355 | – | Jul 22 | HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a… Affected: through 7.2; 7.0; 7.1 |
| CVE-2012-5217 | – | Jul 22 | HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a… Affected: through 7.2; 7.0; 7.1 |