SM
Product
System Management Homepage
On CISA KEVExploited in the wild
78
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 11Medium 12Low 0
Watch
Add System Management Homepage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-8651 In wildKEV | 8.8 | Dec 28 | Adobe Flash Player Integer Overflow Vulnerability Affected: before 7.6 |
| CVE-2016-5387 | 8.1 | Jul 19 | The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY… Affected: through 7.5.5.0 |
| CVE-2016-5385 | 8.1 | Jul 19 | PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in… Affected: through 7.5.5.0 |
| CVE-2016-5388 | 8.1 | Jul 19 | Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the… Affected: through 7.5.5.0 |
| CVE-2016-1993 | 8.1 | Mar 18 | HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors Affected: through 7.5.3.1 |
| CVE-2016-1996 | 7.7 | Mar 18 | HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors Affected: through 7.5.3.1 |
| CVE-2023-50271 | 7.5 | Dec 17 | A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH) Affected: before a.3.2.23.09 |
| CVE-2017-12545 | 7.5 | Feb 15 | A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found Affected: before 7.6.1 |
| CVE-2016-4396 | 7.5 | Oct 28 | HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue Affected: through 7.5.5.0 |
| CVE-2016-4395 | 7.5 | Oct 28 | HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue Affected: through 7.5.5.0 |
| CVE-2016-2015 | 7.1 | May 14 | HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors Affected: through 7.5.4.3 |
Showing 11