CVE-2016-4393

EPSS 1.2%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

28 oct 2016Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue.

Productos afectados

HPE · HPE System Management Homepage before v7.6

Referencias

https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 http://www.securityfocus.com/bid/93961