CVE-2016-2025

Опубликовано: 30 мая 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components.

Ссылки

http://www.securitytracker.com/id/1035954
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05149290
Patch
Vendor Advisory
http://www.securitytracker.com/id/1035954
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05149290
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hp:service_manager:9.30:*:*:*:*:*:*:*

cpe:2.3:a:hp:service_manager:9.31:*:*:*:*:*:*:*

cpe:2.3:a:hp:service_manager:9.32:*:*:*:*:*:*:*

cpe:2.3:a:hp:service_manager:9.33:*:*:*:*:*:*:*

cpe:2.3:a:hp:service_manager:9.34:*:*:*:*:*:*:*

cpe:2.3:a:hp:service_manager:9.35:*:*:*:*:*:*:*

cpe:2.3:a:hp:service_manager:9.40:*:*:*:*:*:*:*

cpe:2.3:a:hp:service_manager:9.41:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.0065

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-76gp-rwc5-4h59