CVE-2016-4393

EPSS 1.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

28 Oct 2016Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue.

Affected products

HPE · HPE System Management Homepage before v7.6

References

https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 http://www.securityfocus.com/bid/93961