VulnerabilityModified
CVE-2016-4393
HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue.
MEDIUM 5.4EPSS 1.16%
Does this matter?
Lower severity and a low EPSS score (1.16%). Track it; it rarely justifies an emergency change on its own.
Description
HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue.
- CVSS 3.0
- 5.4 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 1.16% probability · 65th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- hp/system management homepage
- Source
- security-alert@hpe.com
References
- http://www.securityfocus.com/bid/93961
- https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149Vendor Advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
- http://www.securityfocus.com/bid/93961
- https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149Vendor Advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.