VulnerabilityModified
CVE-2013-6202
Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) insert XSS sequences or (2) execute arbitrary…
MEDIUM 6.8EPSS 2.28%
Does this matter?
Lower severity and a low EPSS score (2.28%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) insert XSS sequences or (2) execute arbitrary code.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 2.28% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- hp/service manager
- Source
- hp-security-alert@hp.com
References
- http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04117626Vendor Advisory
- http://www.securitytracker.com/id/1029803
- http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04117626Vendor Advisory
- http://www.securitytracker.com/id/1029803
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.