ByteOS

Matching Score-10

Product-storeever_msl2024_firmware storeever_msl2024 storeever_1\/8_g2_tape_autoloader storeever_1\/8_g2_tape_autoloader_firmware HPE StoreEver MSL Tape Libraries; HPE StoreEver 1/8 G2 Tape Autoloaders

CVSS Score-8.8||HIGH

EPSS-0.57% / 43.77%

7 Day CHG~0.00%

Published-18 Dec, 2020 | 22:20

Updated-04 Aug, 2024 | 09:25

A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloaders. The vulnerability could be remotely exploited to allow Cross-site Request Forgery (CSRF).

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2023-42027

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-4.3||MEDIUM

EPSS-0.29% / 21.19%

7 Day CHG~0.00%

Published-02 Nov, 2023 | 23:40

Updated-05 Sep, 2024 | 14:34

IBM CICS TX cross-site request forgery

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 266057.

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc

Product-txseries_for_multiplatforms linux_kernel cics_tx hp-ux windows aix CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-28419

Matching Score-8

Assigner-HP Inc.

Matching Score-8

Assigner-HP Inc.

CVSS Score-8.8||HIGH

EPSS-2.24% / 80.97%

7 Day CHG~0.00%

Published-09 Nov, 2021 | 18:01

Updated-04 Aug, 2024 | 16:33

During installation with certain driver software or application packages an arbitrary code execution could occur.

Vendor-n/a HP Inc.

CVE-2015-8651

Matching Score-8

Assigner-Adobe Systems Incorporated

Vendor-n/a HP Inc.Red Hat, Inc.Apple Inc.Google LLC openSUSE Microsoft Corporation Adobe Inc.SUSE Linux Kernel Organization, Inc

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-67.92% / 99.25%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-22 Apr, 2026 | 12:23

Known KEV||Action Due Date - 2022-06-15||The impacted product is end-of-life and should be disconnected if still in use.

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2014-7874

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.55% / 72.56%

7 Day CHG~0.00%

Published-19 Oct, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-hp-ux system_management_homepage n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2014-2633

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.80% / 76.20%

7 Day CHG~0.00%

Published-23 Aug, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-service_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2019-6320

Matching Score-6

Assigner-HP Inc.

Product-deskjet_3630_v3f21a_firmware deskjet_3630_f5s43a deskjet_3630_v3f21a deskjet_3630_f5s43a_firmware deskjet_3630_k4t99c_firmware deskjet_3630_k4u00b_firmware deskjet_3630_k4u03b_firmware deskjet_3630_k4t99c deskjet_3630_v3f22a_firmware deskjet_3630_k4t93a deskjet_3630_k4u00b deskjet_3630_k4u03b deskjet_3630_f5s57a_firmware deskjet_3630_k4t93a_firmware deskjet_3630_v3f22a deskjet_3630_f5s57a HP DeskJet 3630 All-in-One Printer series

Matching Score-6

Assigner-HP Inc.

CVSS Score-8.1||HIGH

EPSS-0.56% / 43.41%

7 Day CHG~0.00%

Published-09 Jan, 2020 | 18:59

Updated-04 Aug, 2024 | 20:16

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN1912BR or higher) have a Cross-Site Request Forgery (CSRF) vulnerability that could lead to a denial of service (DOS) or device misconfiguration.

Vendor-HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2019-6319

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-8.1||HIGH

EPSS-0.56% / 43.41%

7 Day CHG~0.00%

Published-09 Jan, 2020 | 19:04

Updated-04 Aug, 2024 | 20:16

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN1912BR or higher) have a Cross-Site Request Forgery (CSRF) vulnerability that could lead to a denial of service (DOS) or device misconfiguration.

Vendor-HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2013-6192

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.97% / 58.19%

7 Day CHG~0.00%

Published-17 Dec, 2013 | 02:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-operations_orchestration n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2013-6202

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.28% / 81.33%

7 Day CHG~0.00%

Published-24 Feb, 2014 | 02:00

Updated-29 Apr, 2026 | 01:13

Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) insert XSS sequences or (2) execute arbitrary code.

Vendor-n/a HP Inc.

Product-service_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2013-6852

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.46% / 70.91%

7 Day CHG-0.04%

Published-22 Nov, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication of administrators for requests that change an administrative password via the setPassword method.

Vendor-n/a HP Inc.

Product-2620-24-poe\+_switch n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2013-6188

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.98% / 58.53%

7 Day CHG~0.00%

Published-14 Mar, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2014-2641

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6||MEDIUM

EPSS-0.86% / 54.71%

7 Day CHG~0.00%

Published-02 Oct, 2014 | 00:00

Updated-06 May, 2026 | 22:30

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-4024

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.89% / 55.67%

7 Day CHG~0.00%

Published-28 Oct, 2010 | 19:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_power_management n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-4106

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.61% / 73.37%

7 Day CHG~0.00%

Published-01 Nov, 2010 | 19:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_for_linux n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2012-5216

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.97% / 58.19%

7 Day CHG~0.00%

Published-28 Mar, 2013 | 23:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-procurve_switch_1700-24 procurve_switch_software procurve_switch_1700-8 n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2012-3256

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.97% / 58.19%

7 Day CHG~0.00%

Published-08 Sep, 2012 | 10:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-business_availability_center n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2012-2003

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.89% / 77.41%

7 Day CHG~0.00%

Published-02 May, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.Microsoft Corporation

Product-insight_management_agents windows_server_2008 windows_2003_server windows_server_2003 n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2018-5921

Matching Score-6

Assigner-HP Inc.

Product-j8a13a_firmware cf068a l2683a f2a79a_firmware z8z13a_firmware j8a12a j8j78a_firmware j8a10a j7z98a f2a77a j7x28a j8a11a_firmware l3u45a b5l26a_firmware j8j76a j8a06a l1h45a l3u50a j8j74a p7z47a l3u62a_firmware h0dc9a l3u57a_firmware f2a81a_firmware x3a71a f2a71a_firmware d7p68a_firmware z8z23a_firmware l3u41a_firmware cz248a_firmware l3u63a cz249a_firmware x3a80a_firmware l3u48a x3a81a cf067a_firmware l8z07a_firmware g1w47v j8j80a_firmware g1w41a p7z48a x3a65a f2a80a_firmware l3u69a_firmware l3u43a_firmware cd645a_firmware b3g84a g1w39a j8j73a_firmware c2s12v z8z01a_firmware g1w39a_firmware l3u67a l3u70a b3g85a_firmware g1w40v z8z16a_firmware cc523a_firmware z8z22a_firmware c2s11v_firmware cz249a j7z98a_firmware x3a62a_firmware cf066a_firmware z8z11a_firmware j8j74a_firmware f2a71a m0p36a a2w75a_firmware g1w46v l3u49a cf117a_firmware j8a17a l3u42a_firmware cf116a j8j79a z8z08a_firmware m0p40a z8z21a l3u51a a2w79a_firmware a2w76a_firmware c2s11v j8j66a cz250a_firmware h0dc9a_firmware j8j71a_firmware j8a10a_firmware z8z08a j8j63a b5l46a_firmware x3a80a p7z48a_firmware b5l47a_firmware b5l49a a2w77a z8z11a d7p73a x3a63a_firmware l1h45a_firmware x3a66a k0q21a z8z04a c2s12v_firmware m0p39a_firmware z8z12a_firmware x3a60a_firmware k0q22a g1w40a b3g85a a2w75a z8z04a_firmware cd644a_firmware cz244a_firmware c2s12a l3u42a z8z19a l3u55a_firmware z8z05a_firmware cz245a f2a70a_firmware k0q17a z8z21a_firmware b5l39a_firmware g1w47a_firmware j7z06a_firmware cz248a l3u59a_firmware x3a93a_firmware x3a89a l3u48a_firmware z8z17a_firmware x3a79a_firmware g1w40a_firmware ca251a_firmware b5l39a j7x28a_firmware k0q18a_firmware d7p71a_firmware k0q14a_firmware x3a84a_firmware l3u46a_firmware cf069a a2w78a_firmware x3a81a_firmware k0q19a g1w41v x3a63a j8j71a x3a60a j8a16a_firmware l3u43a z8z18a j8a04a_firmware k0q21a_firmware l3u52a_firmware x3a83a_firmware cd645a cf367a_firmware l3u45a_firmware cf068a_firmware j8j80a d7p73a_firmware cc522a_firmware cc524a_firmware z8z02a a2w78a x3a75a_firmware b5l54a_firmware l3u62a b5l48a_firmware cc523a a2w79a z8z09a f2a78v j8j66a_firmware l8z07a x3a79a a2w76a j8a06a_firmware z8z02a_firmware x3a74a_firmware l2683a_firmware l3u49a_firmware x3a87a_firmware x3a77a f2a67a_firmware x3a62a g1w41v_firmware x3a65a_firmware j8a16a z8z14a l3u60a x3a86a z8z18a_firmware j8j72a_firmware cz245a_firmware cc524a z8z23a l3u41a z8z16a l3u56a_firmware j7z04a_firmware x3a59a cc522a j8j65a_firmware g1w47v_firmware c2s11a m0p40a_firmware e6b71a_firmware x3a84a z8z17a j8a13a e6b73a_firmware cf069a_firmware m0p33a m0p35a p7z47a_firmware cz250a d7p68a d7p70a z8z13a l3u44a_firmware z8z19a_firmware l3u47a c2s12a_firmware l3u70a_firmware x3a77a_firmware l3u47a_firmware m0p32a j8j64a j7z04a cf118a cd646a_firmware l3u46a j8j70a l3u69a x3a69a_firmware l2762a_firmware j7z99a l3u57a x3a72a_firmware ca251a m0p32a_firmware g1w46v_firmware b5l07a k0q20a_firmware x3a66a_firmware b5l07a_firmware f2a79a x3a92a j8a17a_firmware b5l05a cz244a j8a12a_firmware cf067a z8z07a_firmware z8z09a_firmware x3a86a_firmware d7p70a_firmware b5l06a k0q15a_firmware z8z15a_firmware k0q18a b5l50a g1w39v_firmware l3u61a z8z07a b5l04a k0q17a_firmware g1w39v z8z05a f2a76a x3a92a_firmware b3g84a_firmware l3u67a_firmware m0p35a_firmware z8z06a_firmware l3u59a j8j72a cf117a cf118a_firmware l3u64a z8z03a z8z03a_firmware l3u51a_firmware l3u44a cf066a j8a05a_firmware l3u55a b5l04a_firmware k0q15a l3u66a_firmware k0q19a_firmware a2w77a_firmware j7z99a_firmware j8j67a x3a83a z8z01a b5l06a_firmware z8z10a_firmware f2a67a j8a05a x3a75a e6b73a l3u61a_firmware j8j64a_firmware b5l47a j8j76a_firmware b5l48a f2a81a z8z15a x3a78a b5l50a_firmware b5l49a_firmware j8j67a_firmware l3u56a j8j63a_firmware z8z06a b5l54a l3u40a_firmware l3u65a l3u64a_firmware cd644a m0p33a_firmware b5l46a z8z00a x3a90a m0p36a_firmware x3a71a_firmware g1w46a_firmware l2762a j8j70a_firmware c2s11a_firmware e6b71a j8a11a f2a76a_firmware z8z22a b5l05a_firmware x3a90a_firmware f2a77a_firmware x3a89a_firmware z8z20a l3u52a cd646a z8z10a l3u65a_firmware j7z06a j8j65a l3u50a_firmware x3a72a x3a78a_firmware g1w40v_firmware l3u66a cf116a_firmware b3g86a b3g86a_firmware x3a59a_firmware m0p39a x3a87a g1w41a_firmware l3u63a_firmware j8a04a z8z00a_firmware x3a74a j8j78a z8z14a_firmware k0q20a l3u40a k0q22a_firmware z8z20a_firmware x3a68a k0q14a d7p71a x3a68a_firmware g1w47a j8j79a_firmware z8z12a g1w46a b5l26a x3a69a f2a78v_firmware j8j73a f2a70a f2a80a x3a93a cf367a Certain HP Enterprise Printers, HP PageWide Printers, and MFP Products

Matching Score-6

Assigner-HP Inc.

CVSS Score-8.8||HIGH

EPSS-0.74% / 50.84%

7 Day CHG~0.00%

Published-03 Oct, 2018 | 20:00

Updated-17 Sep, 2024 | 02:12

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.

Vendor-HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2018-7097

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-0.74% / 50.74%

7 Day CHG~0.00%

Published-14 Aug, 2018 | 14:00

Updated-05 Aug, 2024 | 06:17

A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery.

Product-3par_service_provider HPE 3PAR Service Processors

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2016-8513

Matching Score-6

Matching Score-6

CVSS Score-8||HIGH

EPSS-0.69% / 49.11%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 20:26

A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.

Product-version_control_repository_manager Version Control Repository Manager (VCRM)

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2016-4371

Matching Score-6

Assigner-MITRE Corporation

Product-service_manager_service_request_catalog service_manager_web_client service_manager_windows_client service_manager service_manager_server service_manager_mobility n/a

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8||HIGH

EPSS-0.60% / 45.09%

7 Day CHG~0.00%

Published-19 Jun, 2016 | 01:00

Updated-06 May, 2026 | 22:30

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2015-5445

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-8.8||HIGH

EPSS-1.34% / 68.30%

7 Day CHG~0.00%

Published-05 Jan, 2016 | 11:00

Updated-06 May, 2026 | 22:30

Cross-site request forgery (CSRF) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-storeonce_backup_system_software n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2015-5451

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.49% / 71.48%

7 Day CHG~0.00%

Published-23 Nov, 2015 | 02:00

Updated-06 May, 2026 | 22:30

Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-operations_orchestration n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2015-5412

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6||MEDIUM

EPSS-0.87% / 54.94%

7 Day CHG~0.00%

Published-26 Aug, 2015 | 18:00

Updated-06 May, 2026 | 22:30

Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-version_control_repository_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2015-2134

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6||MEDIUM

EPSS-0.92% / 56.69%

7 Day CHG~0.00%

Published-21 Jul, 2015 | 19:00

Updated-06 May, 2026 | 22:30

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2011-3846

Matching Score-6

Assigner-Flexera Software LLC

Matching Score-6

Assigner-Flexera Software LLC

CVSS Score-6.8||MEDIUM

EPSS-0.98% / 58.53%

7 Day CHG~0.00%

Published-12 Apr, 2012 | 10:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2011-1543

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.87% / 55.10%

7 Day CHG~0.00%

Published-29 Apr, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-systems_insight_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2011-1545

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.60% / 73.32%

7 Day CHG~0.00%

Published-03 May, 2011 | 19:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_performance_management n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2019-6325

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-8.8||HIGH

EPSS-0.98% / 58.64%

7 Day CHG~0.00%

Published-17 Jun, 2019 | 15:55

Updated-04 Aug, 2024 | 20:16

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2011-0277

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.61% / 73.37%

7 Day CHG~0.00%

Published-09 Feb, 2011 | 00:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.

Vendor-n/a HP Inc.

Product-power_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-4032

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.98% / 58.67%

7 Day CHG~0.00%

Published-01 Nov, 2010 | 19:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_performance_management n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-3989

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.95% / 57.71%

7 Day CHG~0.00%

Published-28 Oct, 2010 | 19:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_virtual_machine_management n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-3288

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.89% / 55.67%

7 Day CHG~0.00%

Published-22 Oct, 2010 | 22:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-systems_insight_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-1968

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.94% / 57.12%

7 Day CHG~0.00%

Published-14 Jul, 2010 | 18:31

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1971.

Vendor-n/a HP Inc.Microsoft Corporation

Product-insight_software_installer windows n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-1971

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.94% / 57.12%

7 Day CHG~0.00%

Published-14 Jul, 2010 | 18:31

Updated-29 Apr, 2026 | 01:13

Vendor-n/a HP Inc.Microsoft Corporation

Product-insight_software_installer windows n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-1037

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.57% / 72.85%

7 Day CHG~0.00%

Published-28 Apr, 2010 | 22:00

Updated-29 Apr, 2026 | 01:13

Cross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-systems_insight_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2009-2677

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.30% / 67.49%

7 Day CHG~0.00%

Published-14 Aug, 2009 | 15:00

Updated-23 Apr, 2026 | 00:35

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Suite For Linux (aka ICE-LX) before 2.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_suite_for_linux n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2009-0940

Matching Score-6

Assigner-MITRE Corporation

Product-laserjet_2600c laserjet_p3000 laserjet_2200 laserjet_p1006 laserjet_4v\/mv laserjet_iip_plus laserjet_4100mfp laserjet_m4345_mfp laserjet_1200 laserjet_m3027_mfp color_laserjet_5550 laserjet_9000mfp laserjet_p4014 laserjet_p2050 laserjet_4p\/mp color_laserjet_9500_mfp color_laserjet_2500n color_laserjet_2500 laserjet_1018 laserjet_2100 laserjet_p1505n laserjet_p3005 laserjet_5p\/mp laserjet_iii laserjet_8000 9200c_digital_sender color_laserjet_2605dtn laserjet_4200 laserjet_4000n laserjet_iiip laserjet_2000 laserjet_p1009 laserjet_2500 laserjet_5100 laserjet_2300dn laserjet_1022nw laserjet_iid laserjet_p2000 laserjet_2300 color_laserjet_2500lse color_laserjet_1500 color_laserjet_4730_mfp laserjet_4650dn laserjet_5000 laserjet_4 laserjet_p1505 9100c_digital_sender color_laserjet laserjet_9000_mfp laserjet_m5025_mfp laserjet_4250 laserjet_1012 laserjet_m5035_mfp laserjet_p4510 laserjet_4\/4m laserjet_1160 laserjet_2420 laserjet_2600n laserjet_p1000 laserjet_9065 laserjet_1022n laserjet_4si laserjet_p2030 laserjet_4l\/ml laserjet_5m laserjet_3700 laserjet_9050 laserjet_5200 color_laserjet_2500tn laserjet_4240n color_laserjet_9500 laserjet_1150 laserjet_8150 laserjet_5\/m\/n laserjet_p4500 color_laserjet_4600hdn laserjet_2400 color_laserjet_4700 laserjet_4345mfp laserjet_1320 laserjet_1018s laserjet_p2010 laserjet_4100 laserjet_m3035_mfp laserjet_1005 laserjet_1000 laserjet_9500 laserjet_2 laserjet_4050 laserjet_1015 edgeline_printers laserjet_p4010 laserjet_9000 laserjet_4100_mfp laserjet_4200ln laserjet_500_plus laserjet_p1007 color_laserjet_9500mfp laserjet_4345_mfp color_mfp_cm8050 laserjet_p2015 laserjet_iiisi color_laserjet_2500l color_laserjet_5500 laserjet_4200dtn laserjet_4240 laserjet_p1005 laserjet_4300 color_laserjet_4600dn laserjet_4000 laserjet_ii digital_senders laserjet_p1008 laserjet_5100dtn laserjet_2430 laserjet_8100 laserjet_5si laserjet_5l laserjet_4350 8100c_digital_sender color_laserjet_8550 laserjet_9040mfp laserjet_9050_mfp laserjet_5 laserjet_8150dn laserjet_1300 9250c_digital_sender laserjet_iip laserjet_1010 laserjet_m1522n_mfp laserjet_2200dtn laserjet_2410 color_laserjet_4370mfp laserjet_iiid laserjet_9050mfp laserjet_1020 color_laserjet_4600 color_laserjet_8500 laserjet_1100 laserjet_9500mfp color_laserjet_4600dtn laserjet_3000 laserjet_2500c color_mfp_cm8060 laserjet_4350dtn laserjet_4m_plus laserjet_9055 laserjet_1022 laserjet_p4015 laserjet_9040 color_laserjet_4650 laserjet_p1500 laserjet_1020_plus laserjet_4_plus\/m_plus n/a

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.1||MEDIUM

EPSS-1.08% / 61.66%

7 Day CHG~0.00%

Published-18 Mar, 2009 | 20:35

Updated-23 Apr, 2026 | 00:35

Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2017-5796

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-2.18% / 80.44%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 19:30

A Remote Cross Site Request Forgery (CSRF) vulnerability in HPE 2620 Series Network Switches version RA.15.05.0006 was found.

Product-j9627a j9623a j9626a_firmware j9623a_firmware j9625a_firmware j9624a_firmware j9626a j9625a j9627a_firmware j9624a 2620 Series Network Switches

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2017-5781

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-0.74% / 50.84%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-17 Sep, 2024 | 01:37

A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found.

Product-matrix_operating_environment Matrix Operating Environment

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-13663

Matching Score-4

Assigner-Drupal.org

Matching Score-4

Assigner-Drupal.org

CVSS Score-8.8||HIGH

EPSS-0.69% / 49.18%

7 Day CHG~0.00%

Published-11 Jun, 2021 | 15:07

Updated-04 Aug, 2024 | 12:25

Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities.

Vendor-The Drupal Association

Product-drupal Drupal Core

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-12781

Matching Score-4

Assigner-TWCERT/CC

Matching Score-4

Assigner-TWCERT/CC

CVSS Score-5.7||MEDIUM

EPSS-0.48% / 38.54%

7 Day CHG~0.00%

Published-10 Aug, 2020 | 02:45

Updated-16 Sep, 2024 | 23:26

Combodo iTop - CSRF

Combodo iTop contains a cross-site request forgery (CSRF) vulnerability, attackers can execute specific commands via malicious site request forgery.

Vendor-combodo Combodo

Product-itop iTop

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-12502

Matching Score-4

Assigner-CERT@VDE

Matching Score-4

Assigner-CERT@VDE

CVSS Score-8.8||HIGH

EPSS-1.03% / 60.05%

7 Day CHG~0.00%

Published-15 Oct, 2020 | 18:42

Updated-16 Sep, 2024 | 18:43

Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to unauthenticated device administration.

Vendor-pepperl-fuchs korenix Westermo Pepperl+Fuchs Korenix

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2015-0970

Matching Score-4

Assigner-CERT/CC

Matching Score-4

Assigner-CERT/CC

CVSS Score-8.8||HIGH

EPSS-1.04% / 60.37%

7 Day CHG~0.00%

Published-18 Apr, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users.

Vendor-searchblox n/a

Product-searchblox n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-13643

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.81% / 53.08%

7 Day CHG~0.00%

Published-28 May, 2020 | 03:11

Updated-04 Aug, 2024 | 12:25

An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The live_editor_panels_data $_POST variable allows for malicious JavaScript to be executed in the victim's browser.

Vendor-siteorigin n/a

Product-page_builder n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-13155

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.69% / 48.85%

7 Day CHG~0.00%

Published-23 Jun, 2020 | 19:15

Updated-04 Aug, 2024 | 12:11

clearsystem.php in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the admin/index.php?nv=webtools&op=clearsystem URI.

Vendor-nukeviet n/a

Product-nukeviet n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2024-28195

Matching Score-4

Assigner-GitHub, Inc.

Matching Score-4

Assigner-GitHub, Inc.

CVSS Score-8.1||HIGH

EPSS-0.37% / 29.50%

7 Day CHG~0.00%

Published-13 Mar, 2024 | 17:16

Updated-15 Apr, 2025 | 15:18

Cross-Site Request Forgery (CSRF) vulnerability in API and login in your_spotify

your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.9.0 do not protect the API and login flow against Cross-Site Request Forgery (CSRF). Attackers can use this to execute CSRF attacks on victims, allowing them to retrieve, modify or delete data on the affected YourSpotify instance. Using repeated CSRF attacks, it is also possible to create a new user on the victim instance and promote the new user to instance administrator if a legitimate administrator visits a website prepared by an attacker. Note: Real-world exploitability of this vulnerability depends on the browser version and browser settings in use by the victim. This issue has been addressed in version 1.9.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Vendor-yooooomi Yooooomi yooooomi

Product-your_spotify your_spotify your_spotify

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2022-34937

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.62% / 45.84%

7 Day CHG~0.00%

Published-03 Aug, 2022 | 00:50

Updated-03 Aug, 2024 | 09:22

Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows attackers to execute arbitrary code.

Vendor-yuba n/a

Product-u5cms n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-13412

Matching Score-4

Assigner-MITRE Corporation