CVE-2016-4371
HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.
- Score
- CVSS 3.0 8.0 High
- Status
- Modified - cve@mitre.org
- Published
- 2016-06-19
- Last modified
- 2024-08-06
- Weaknesses
- CWE-352
Affected products
- Service Manager (Hp)
- Service Manager Mobility (Hp)
- Service Manager Server (Hp)
- Service Manager Service Request Catalog (Hp)
- Service Manager Web Client (Hp)
- Service Manager Windows Client (Hp)
References
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176
