Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2016-4371

Summary
Assigner-mitre
Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca
Published At-19 Jun, 2016 | 01:00
Updated At-06 Aug, 2024 | 00:25
Rejected At-
Credits

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:mitre
Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca
Published At:19 Jun, 2016 | 01:00
Updated At:06 Aug, 2024 | 00:25
Rejected At:
▼CVE Numbering Authority (CNA)

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Type: text
CWE ID: N/A
Description: n/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176
x_refsource_CONFIRM
Hyperlink: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176
Resource:
x_refsource_CONFIRM
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176
x_refsource_CONFIRM
x_transferred
Hyperlink: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176
Resource:
x_refsource_CONFIRM
x_transferred
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:cve@mitre.org
Published At:19 Jun, 2016 | 01:59
Updated At:12 Apr, 2025 | 10:46

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.08.0HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Primary2.06.0MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P
Type: Primary
Version: 3.0
Base score: 8.0
Base severity: HIGH
Vector:
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Type: Primary
Version: 2.0
Base score: 6.0
Base severity: MEDIUM
Vector:
AV:N/AC:M/Au:S/C:P/I:P/A:P
CPE Matches
HP Inc.
hp
>>service_manager>>9.30
cpe:2.3:a:hp:service_manager:9.30:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager>>9.31
cpe:2.3:a:hp:service_manager:9.31:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager>>9.32
cpe:2.3:a:hp:service_manager:9.32:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager>>9.33
cpe:2.3:a:hp:service_manager:9.33:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager>>9.34
cpe:2.3:a:hp:service_manager:9.34:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager>>9.35
cpe:2.3:a:hp:service_manager:9.35:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager>>9.40
cpe:2.3:a:hp:service_manager:9.40:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager>>9.41
cpe:2.3:a:hp:service_manager:9.41:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_mobility>>9.30
cpe:2.3:a:hp:service_manager_mobility:9.30:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_mobility>>9.31
cpe:2.3:a:hp:service_manager_mobility:9.31:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_mobility>>9.32
cpe:2.3:a:hp:service_manager_mobility:9.32:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_mobility>>9.33
cpe:2.3:a:hp:service_manager_mobility:9.33:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_mobility>>9.34
cpe:2.3:a:hp:service_manager_mobility:9.34:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_mobility>>9.35
cpe:2.3:a:hp:service_manager_mobility:9.35:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_mobility>>9.40
cpe:2.3:a:hp:service_manager_mobility:9.40:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_mobility>>9.41
cpe:2.3:a:hp:service_manager_mobility:9.41:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_server>>9.30
cpe:2.3:a:hp:service_manager_server:9.30:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_server>>9.31
cpe:2.3:a:hp:service_manager_server:9.31:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_server>>9.32
cpe:2.3:a:hp:service_manager_server:9.32:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_server>>9.33
cpe:2.3:a:hp:service_manager_server:9.33:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_server>>9.34
cpe:2.3:a:hp:service_manager_server:9.34:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_server>>9.35
cpe:2.3:a:hp:service_manager_server:9.35:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_server>>9.40
cpe:2.3:a:hp:service_manager_server:9.40:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_server>>9.41
cpe:2.3:a:hp:service_manager_server:9.41:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_service_request_catalog>>9.30
cpe:2.3:a:hp:service_manager_service_request_catalog:9.30:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_service_request_catalog>>9.31
cpe:2.3:a:hp:service_manager_service_request_catalog:9.31:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_service_request_catalog>>9.32
cpe:2.3:a:hp:service_manager_service_request_catalog:9.32:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_service_request_catalog>>9.33
cpe:2.3:a:hp:service_manager_service_request_catalog:9.33:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_service_request_catalog>>9.34
cpe:2.3:a:hp:service_manager_service_request_catalog:9.34:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_service_request_catalog>>9.35
cpe:2.3:a:hp:service_manager_service_request_catalog:9.35:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_service_request_catalog>>9.40
cpe:2.3:a:hp:service_manager_service_request_catalog:9.40:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_service_request_catalog>>9.41
cpe:2.3:a:hp:service_manager_service_request_catalog:9.41:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_web_client>>9.30
cpe:2.3:a:hp:service_manager_web_client:9.30:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_web_client>>9.31
cpe:2.3:a:hp:service_manager_web_client:9.31:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_web_client>>9.32
cpe:2.3:a:hp:service_manager_web_client:9.32:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_web_client>>9.33
cpe:2.3:a:hp:service_manager_web_client:9.33:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_web_client>>9.34
cpe:2.3:a:hp:service_manager_web_client:9.34:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_web_client>>9.35
cpe:2.3:a:hp:service_manager_web_client:9.35:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_web_client>>9.40
cpe:2.3:a:hp:service_manager_web_client:9.40:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_web_client>>9.41
cpe:2.3:a:hp:service_manager_web_client:9.41:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_windows_client>>9.30
cpe:2.3:a:hp:service_manager_windows_client:9.30:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_windows_client>>9.31
cpe:2.3:a:hp:service_manager_windows_client:9.31:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_windows_client>>9.32
cpe:2.3:a:hp:service_manager_windows_client:9.32:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_windows_client>>9.33
cpe:2.3:a:hp:service_manager_windows_client:9.33:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_windows_client>>9.34
cpe:2.3:a:hp:service_manager_windows_client:9.34:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_windows_client>>9.35
cpe:2.3:a:hp:service_manager_windows_client:9.35:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_windows_client>>9.40
cpe:2.3:a:hp:service_manager_windows_client:9.40:*:*:*:*:*:*:*
HP Inc.
hp
>>service_manager_windows_client>>9.41
cpe:2.3:a:hp:service_manager_windows_client:9.41:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-352Primarynvd@nist.gov
CWE ID: CWE-352
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176cve@mitre.org
Vendor Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Hyperlink: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05167176
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory

Change History

0
Information is not available yet

Similar CVEs

166Records found
CVE-2014-2641
Matching Score-10
Assigner-HP Inc.
ShareView Details
Matching Score-10
Assigner-HP Inc.
CVSS Score-6||MEDIUM
EPSS-0.06% / 17.52%
||
7 Day CHG~0.00%
Published-02 Oct, 2014 | 00:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-system_management_homepagen/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2016-8513
Matching Score-10
Assigner-Hewlett Packard Enterprise (HPE)
ShareView Details
Matching Score-10
Assigner-Hewlett Packard Enterprise (HPE)
CVSS Score-8||HIGH
EPSS-0.17% / 39.10%
||
7 Day CHG~0.00%
Published-15 Feb, 2018 | 22:00
Updated-16 Sep, 2024 | 20:26
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.

Action-Not Available
Vendor-HP Inc.Hewlett Packard Enterprise (HPE)
Product-version_control_repository_managerVersion Control Repository Manager (VCRM)
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2015-5412
Matching Score-10
Assigner-HP Inc.
ShareView Details
Matching Score-10
Assigner-HP Inc.
CVSS Score-6||MEDIUM
EPSS-0.05% / 15.30%
||
7 Day CHG~0.00%
Published-26 Aug, 2015 | 18:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-version_control_repository_managern/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2015-2134
Matching Score-10
Assigner-HP Inc.
ShareView Details
Matching Score-10
Assigner-HP Inc.
CVSS Score-6||MEDIUM
EPSS-0.08% / 23.28%
||
7 Day CHG~0.00%
Published-21 Jul, 2015 | 19:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-system_management_homepagen/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2013-2323
Matching Score-8
Assigner-HP Inc.
ShareView Details
Matching Score-8
Assigner-HP Inc.
CVSS Score-6||MEDIUM
EPSS-0.23% / 46.05%
||
7 Day CHG~0.00%
Published-28 Jun, 2013 | 14:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

HP SQL/MX 3.0 through 3.2 on NonStop servers, when SQL/MP Objects are used, allows remote authenticated users to bypass intended access restrictions and modify data via unspecified vectors, aka the "SQL/MP tables" issue.

Action-Not Available
Vendor-n/aHP Inc.
Product-nonstop_sql\/mxn/a
CVE-2016-4382
Matching Score-8
Assigner-MITRE Corporation
ShareView Details
Matching Score-8
Assigner-MITRE Corporation
CVSS Score-8.3||HIGH
EPSS-0.12% / 32.33%
||
7 Day CHG~0.00%
Published-21 Sep, 2016 | 01:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to a "remote user validation failure" issue.

Action-Not Available
Vendor-n/aHP Inc.
Product-performance_centern/a
CVE-2011-1535
Matching Score-8
Assigner-HP Inc.
ShareView Details
Matching Score-8
Assigner-HP Inc.
CVSS Score-6||MEDIUM
EPSS-0.36% / 57.68%
||
7 Day CHG~0.00%
Published-29 Apr, 2011 | 22:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux) before 6.3 allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-insight_control_for_linuxn/a
CVE-2011-1724
Matching Score-8
Assigner-HP Inc.
ShareView Details
Matching Score-8
Assigner-HP Inc.
CVSS Score-6||MEDIUM
EPSS-0.37% / 58.26%
||
7 Day CHG~0.00%
Published-03 May, 2011 | 19:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Unspecified vulnerability in HP Virtual Server Environment before 6.3 allows remote authenticated users to gain privileges via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-virtual_server_environmentn/a
CVE-2011-1544
Matching Score-8
Assigner-HP Inc.
ShareView Details
Matching Score-8
Assigner-HP Inc.
CVSS Score-6||MEDIUM
EPSS-0.29% / 52.11%
||
7 Day CHG~0.00%
Published-03 May, 2011 | 19:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-insight_control_performance_managementn/a
CVE-2011-1543
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-4.3||MEDIUM
EPSS-0.15% / 36.88%
||
7 Day CHG~0.00%
Published-29 Apr, 2011 | 22:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-systems_insight_managern/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2011-1545
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.14% / 35.48%
||
7 Day CHG~0.00%
Published-03 May, 2011 | 19:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-insight_control_performance_managementn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2010-4024
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.12% / 31.57%
||
7 Day CHG~0.00%
Published-28 Oct, 2010 | 19:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-insight_control_power_managementn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2010-1971
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.15% / 35.68%
||
7 Day CHG~0.00%
Published-14 Jul, 2010 | 18:31
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1968.

Action-Not Available
Vendor-n/aHP Inc.Microsoft Corporation
Product-windowsinsight_software_installern/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2010-1037
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.14% / 35.48%
||
7 Day CHG~0.00%
Published-28 Apr, 2010 | 22:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-systems_insight_managern/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2010-4106
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.11% / 30.29%
||
7 Day CHG~0.00%
Published-01 Nov, 2010 | 19:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-insight_control_for_linuxn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2009-2677
Matching Score-6
Assigner-MITRE Corporation
ShareView Details
Matching Score-6
Assigner-MITRE Corporation
CVSS Score-6.8||MEDIUM
EPSS-0.06% / 19.80%
||
7 Day CHG~0.00%
Published-14 Aug, 2009 | 15:00
Updated-07 Aug, 2024 | 05:59
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Suite For Linux (aka ICE-LX) before 2.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-insight_control_suite_for_linuxn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2009-0940
Matching Score-6
Assigner-MITRE Corporation
ShareView Details
Matching Score-6
Assigner-MITRE Corporation
CVSS Score-5.1||MEDIUM
EPSS-0.84% / 73.72%
||
7 Day CHG~0.00%
Published-18 Mar, 2009 | 20:35
Updated-07 Aug, 2024 | 04:57
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.

Action-Not Available
Vendor-n/aHP Inc.
Product-color_laserjet_4730_mfplaserjet_2200dtncolor_mfp_cm8060laserjet_4_plus\/m_pluslaserjet_1010laserjet_5llaserjet_4v\/mvcolor_laserjet_5500laserjet_9050mfpcolor_laserjet_4650laserjet_8100laserjet_2420laserjet_4000laserjet_4200dtndigital_senderslaserjet_1000laserjet_1320color_laserjet_8500color_laserjet_2605dtnlaserjet_4350dtnlaserjet_8150dn9200c_digital_senderlaserjet_1018slaserjet_25009250c_digital_sendercolor_laserjet_4600hdnlaserjet_p4010color_laserjet_4600dnlaserjet_1160laserjet_8000color_laserjet_1500color_laserjet_2500llaserjet_4m_pluslaserjet_p1005laserjet_m5025_mfplaserjet_2100color_mfp_cm8050laserjet_1005laserjet_2300laserjet_4240nlaserjet_p1500laserjet_1022nwcolor_laserjet_2500ncolor_laserjet_4700laserjet_p4510laserjet_5200laserjet_9000_mfplaserjet_iiiplaserjet_p2015laserjet_2430color_laserjet_2500color_laserjet_2500tnlaserjet_m1522n_mfp8100c_digital_senderlaserjet_5100dtnlaserjet_9000laserjet_9050laserjet_iiidlaserjet_p4500laserjet_5laserjet_4100mfplaserjet_9000mfplaserjet_1100laserjet_4300laserjet_9065laserjet_1020color_laserjet_2500lsecolor_laserjet_4600laserjet_5silaserjet_p2010laserjet_p2000laserjet_4100_mfplaserjet_iidlaserjet_1022laserjet_2500claserjet_2600claserjet_4345mfplaserjet_2000laserjet_500_pluslaserjet_9040mfplaserjet_9040color_laserjet_8550laserjet_9055laserjet_2400laserjet_9500mfplaserjet_p2030laserjet_p1000laserjet_4\/4mlaserjet_iip_pluslaserjet_m3027_mfpcolor_laserjet_5550laserjet_iiplaserjet_4250laserjet_m5035_mfplaserjet_1012laserjet_2600nlaserjet_5100laserjet_iilaserjet_iiilaserjet_p4015laserjet_4650dnlaserjet_5mlaserjet_2laserjet_p1009laserjet_4000nlaserjet_8150laserjet_2200color_laserjet_9500_mfplaserjet_9050_mfp9100c_digital_senderlaserjet_1150laserjet_1015laserjet_4345_mfplaserjet_5000laserjet_4l\/mllaserjet_p1006laserjet_p1505nlaserjet_4050laserjet_m3035_mfplaserjet_p1008laserjet_5\/m\/nlaserjet_4silaserjet_4100laserjet_4p\/mplaserjet_p1505color_laserjet_4370mfplaserjet_4laserjet_1018laserjet_9500laserjet_p1007laserjet_p3000laserjet_1022nlaserjet_2410laserjet_3700laserjet_p2050color_laserjet_9500mfplaserjet_2300dnlaserjet_m4345_mfplaserjet_3000color_laserjetlaserjet_1020_pluscolor_laserjet_4600dtnlaserjet_5p\/mplaserjet_p3005laserjet_1200laserjet_p4014laserjet_4200lnlaserjet_4350laserjet_4200color_laserjet_9500laserjet_4240laserjet_iiisilaserjet_1300edgeline_printersn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2017-5781
Matching Score-6
Assigner-Hewlett Packard Enterprise (HPE)
ShareView Details
Matching Score-6
Assigner-Hewlett Packard Enterprise (HPE)
CVSS Score-8.8||HIGH
EPSS-0.22% / 44.28%
||
7 Day CHG~0.00%
Published-15 Feb, 2018 | 22:00
Updated-17 Sep, 2024 | 01:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found.

Action-Not Available
Vendor-HP Inc.Hewlett Packard Enterprise (HPE)
Product-matrix_operating_environmentMatrix Operating Environment
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2017-5796
Matching Score-6
Assigner-Hewlett Packard Enterprise (HPE)
ShareView Details
Matching Score-6
Assigner-Hewlett Packard Enterprise (HPE)
CVSS Score-8.8||HIGH
EPSS-0.49% / 64.56%
||
7 Day CHG~0.00%
Published-15 Feb, 2018 | 22:00
Updated-16 Sep, 2024 | 19:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A Remote Cross Site Request Forgery (CSRF) vulnerability in HPE 2620 Series Network Switches version RA.15.05.0006 was found.

Action-Not Available
Vendor-HP Inc.Hewlett Packard Enterprise (HPE)
Product-j9627aj9623aj9626a_firmwarej9623a_firmwarej9625a_firmwarej9624a_firmwarej9626aj9625aj9627a_firmwarej9624a2620 Series Network Switches
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2013-6852
Matching Score-6
Assigner-MITRE Corporation
ShareView Details
Matching Score-6
Assigner-MITRE Corporation
CVSS Score-6.8||MEDIUM
EPSS-0.37% / 57.83%
||
7 Day CHG~0.00%
Published-22 Nov, 2013 | 01:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication of administrators for requests that change an administrative password via the setPassword method.

Action-Not Available
Vendor-n/aHP Inc.
Product-2620-24-poe\+_switchn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2013-6202
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.44% / 62.13%
||
7 Day CHG~0.00%
Published-24 Feb, 2014 | 02:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) insert XSS sequences or (2) execute arbitrary code.

Action-Not Available
Vendor-n/aHP Inc.
Product-service_managern/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2013-6188
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.14% / 34.67%
||
7 Day CHG~0.00%
Published-14 Mar, 2014 | 10:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-system_management_homepagen/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2023-42027
Matching Score-6
Assigner-IBM Corporation
ShareView Details
Matching Score-6
Assigner-IBM Corporation
CVSS Score-4.3||MEDIUM
EPSS-0.04% / 11.09%
||
7 Day CHG~0.00%
Published-02 Nov, 2023 | 23:40
Updated-05 Sep, 2024 | 14:34
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
IBM CICS TX cross-site request forgery

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 266057.

Action-Not Available
Vendor-Microsoft CorporationHP Inc.IBM CorporationLinux Kernel Organization, Inc
Product-txseries_for_multiplatformslinux_kernelcics_txhp-uxwindowsaixCICS TX AdvancedCICS TX StandardTXSeries for Multiplatforms
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2012-2003
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.34% / 55.84%
||
7 Day CHG~0.00%
Published-02 May, 2012 | 22:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.Microsoft Corporation
Product-windows_server_2008windows_server_2003windows_2003_serverinsight_management_agentsn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2011-3846
Matching Score-6
Assigner-Flexera Software LLC
ShareView Details
Matching Score-6
Assigner-Flexera Software LLC
CVSS Score-6.8||MEDIUM
EPSS-0.16% / 36.93%
||
7 Day CHG~0.00%
Published-12 Apr, 2012 | 10:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

Action-Not Available
Vendor-n/aHP Inc.
Product-system_management_homepagen/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2014-2633
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.30% / 53.04%
||
7 Day CHG~0.00%
Published-23 Aug, 2014 | 23:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-service_managern/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2019-6320
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-8.1||HIGH
EPSS-0.15% / 36.89%
||
7 Day CHG~0.00%
Published-09 Jan, 2020 | 18:59
Updated-04 Aug, 2024 | 20:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN1912BR or higher) have a Cross-Site Request Forgery (CSRF) vulnerability that could lead to a denial of service (DOS) or device misconfiguration.

Action-Not Available
Vendor-HP Inc.
Product-deskjet_3630_v3f21a_firmwaredeskjet_3630_f5s43adeskjet_3630_v3f21adeskjet_3630_f5s43a_firmwaredeskjet_3630_k4t99c_firmwaredeskjet_3630_k4u00b_firmwaredeskjet_3630_k4u03b_firmwaredeskjet_3630_k4t99cdeskjet_3630_v3f22a_firmwaredeskjet_3630_k4t93adeskjet_3630_k4u00bdeskjet_3630_k4u03bdeskjet_3630_f5s57a_firmwaredeskjet_3630_k4t93a_firmwaredeskjet_3630_v3f22adeskjet_3630_f5s57aHP DeskJet 3630 All-in-One Printer series
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2019-6319
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-8.1||HIGH
EPSS-0.15% / 36.89%
||
7 Day CHG~0.00%
Published-09 Jan, 2020 | 19:04
Updated-04 Aug, 2024 | 20:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN1912BR or higher) have a Cross-Site Request Forgery (CSRF) vulnerability that could lead to a denial of service (DOS) or device misconfiguration.

Action-Not Available
Vendor-HP Inc.
Product-deskjet_3630_v3f21a_firmwaredeskjet_3630_f5s43adeskjet_3630_v3f21adeskjet_3630_f5s43a_firmwaredeskjet_3630_k4t99c_firmwaredeskjet_3630_k4u00b_firmwaredeskjet_3630_k4u03b_firmwaredeskjet_3630_k4t99cdeskjet_3630_v3f22a_firmwaredeskjet_3630_k4t93adeskjet_3630_k4u00bdeskjet_3630_k4u03bdeskjet_3630_f5s57a_firmwaredeskjet_3630_k4t93a_firmwaredeskjet_3630_v3f22adeskjet_3630_f5s57aHP DeskJet 3630 All-in-One Printer series
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2012-3256
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.12% / 31.53%
||
7 Day CHG~0.00%
Published-08 Sep, 2012 | 10:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-business_availability_centern/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2019-6325
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-8.8||HIGH
EPSS-0.22% / 44.28%
||
7 Day CHG~0.00%
Published-17 Jun, 2019 | 15:55
Updated-04 Aug, 2024 | 20:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery.

Action-Not Available
Vendor-n/aHP Inc.
Product-y5s53a_firmwaret6b83aw2g54a_firmwarey5s55aw2g54ay5s50a_firmwaret6b80at6b82a_firmwarey5s54ay5s54a_firmwaret6b83a_firmwaret6b80a_firmwarew2g55a_firmwarey5s50at6b82aw2g55ay5s53ay5s55a_firmwaret6b81a_firmwaret6b81aHP Color LaserJet Pro M280-M281 Multifunction Printer series; HP LaserJet Pro MFP M28-M31 Printer series
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2010-4032
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.17% / 38.58%
||
7 Day CHG~0.00%
Published-01 Nov, 2010 | 19:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-insight_control_performance_managementn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2010-3288
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.12% / 31.57%
||
7 Day CHG~0.00%
Published-22 Oct, 2010 | 22:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-systems_insight_managern/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2011-0277
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.17% / 38.34%
||
7 Day CHG~0.00%
Published-09 Feb, 2011 | 00:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.

Action-Not Available
Vendor-n/aHP Inc.
Product-power_managern/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2010-3989
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.13% / 33.25%
||
7 Day CHG~0.00%
Published-28 Oct, 2010 | 19:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-insight_control_virtual_machine_managementn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2010-1968
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.15% / 35.68%
||
7 Day CHG~0.00%
Published-14 Jul, 2010 | 18:31
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1971.

Action-Not Available
Vendor-n/aHP Inc.Microsoft Corporation
Product-windowsinsight_software_installern/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2018-5921
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-8.8||HIGH
EPSS-0.22% / 44.28%
||
7 Day CHG~0.00%
Published-03 Oct, 2018 | 20:00
Updated-17 Sep, 2024 | 02:12
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.

Action-Not Available
Vendor-HP Inc.
Product-j8a13a_firmwarecf068al2683af2a79a_firmwarez8z13a_firmwarej8a12aj8j78a_firmwarej8a10aj7z98af2a77aj7x28aj8a11a_firmwarel3u45ab5l26a_firmwarej8j76aj8a06al1h45al3u50aj8j74ap7z47al3u62a_firmwareh0dc9al3u57a_firmwaref2a81a_firmwarex3a71af2a71a_firmwared7p68a_firmwarez8z23a_firmwarel3u41a_firmwarecz248a_firmwarel3u63acz249a_firmwarex3a80a_firmwarel3u48ax3a81acf067a_firmwarel8z07a_firmwareg1w47vj8j80a_firmwareg1w41ap7z48ax3a65af2a80a_firmwarel3u69a_firmwarel3u43a_firmwarecd645a_firmwareb3g84ag1w39aj8j73a_firmwarec2s12vz8z01a_firmwareg1w39a_firmwarel3u67al3u70ab3g85a_firmwareg1w40vz8z16a_firmwarecc523a_firmwarez8z22a_firmwarec2s11v_firmwarecz249aj7z98a_firmwarex3a62a_firmwarecf066a_firmwarez8z11a_firmwarej8j74a_firmwaref2a71am0p36aa2w75a_firmwareg1w46vl3u49acf117a_firmwarej8a17al3u42a_firmwarecf116aj8j79az8z08a_firmwarem0p40az8z21al3u51aa2w79a_firmwarea2w76a_firmwarec2s11vj8j66acz250a_firmwareh0dc9a_firmwarej8j71a_firmwarej8a10a_firmwarez8z08aj8j63ab5l46a_firmwarex3a80ap7z48a_firmwareb5l47a_firmwareb5l49aa2w77az8z11ad7p73ax3a63a_firmwarel1h45a_firmwarex3a66ak0q21az8z04ac2s12v_firmwarem0p39a_firmwarez8z12a_firmwarex3a60a_firmwarek0q22ag1w40ab3g85aa2w75az8z04a_firmwarecd644a_firmwarecz244a_firmwarec2s12al3u42az8z19al3u55a_firmwarez8z05a_firmwarecz245af2a70a_firmwarek0q17az8z21a_firmwareb5l39a_firmwareg1w47a_firmwarej7z06a_firmwarecz248al3u59a_firmwarex3a93a_firmwarex3a89al3u48a_firmwarez8z17a_firmwarex3a79a_firmwareg1w40a_firmwareca251a_firmwareb5l39aj7x28a_firmwarek0q18a_firmwared7p71a_firmwarek0q14a_firmwarex3a84a_firmwarel3u46a_firmwarecf069aa2w78a_firmwarex3a81a_firmwarek0q19ag1w41vx3a63aj8j71ax3a60aj8a16a_firmwarel3u43az8z18aj8a04a_firmwarek0q21a_firmwarel3u52a_firmwarex3a83a_firmwarecd645acf367a_firmwarel3u45a_firmwarecf068a_firmwarej8j80ad7p73a_firmwarecc522a_firmwarecc524a_firmwarez8z02aa2w78ax3a75a_firmwareb5l54a_firmwarel3u62ab5l48a_firmwarecc523aa2w79az8z09af2a78vj8j66a_firmwarel8z07ax3a79aa2w76aj8a06a_firmwarez8z02a_firmwarex3a74a_firmwarel2683a_firmwarel3u49a_firmwarex3a87a_firmwarex3a77af2a67a_firmwarex3a62ag1w41v_firmwarex3a65a_firmwarej8a16az8z14al3u60ax3a86az8z18a_firmwarej8j72a_firmwarecz245a_firmwarecc524az8z23al3u41az8z16al3u56a_firmwarej7z04a_firmwarex3a59acc522aj8j65a_firmwareg1w47v_firmwarec2s11am0p40a_firmwaree6b71a_firmwarex3a84az8z17aj8a13ae6b73a_firmwarecf069a_firmwarem0p33am0p35ap7z47a_firmwarecz250ad7p68ad7p70az8z13al3u44a_firmwarez8z19a_firmwarel3u47ac2s12a_firmwarel3u70a_firmwarex3a77a_firmwarel3u47a_firmwarem0p32aj8j64aj7z04acf118acd646a_firmwarel3u46aj8j70al3u69ax3a69a_firmwarel2762a_firmwarej7z99al3u57ax3a72a_firmwareca251am0p32a_firmwareg1w46v_firmwareb5l07ak0q20a_firmwarex3a66a_firmwareb5l07a_firmwaref2a79ax3a92aj8a17a_firmwareb5l05acz244aj8a12a_firmwarecf067az8z07a_firmwarez8z09a_firmwarex3a86a_firmwared7p70a_firmwareb5l06ak0q15a_firmwarez8z15a_firmwarek0q18ab5l50ag1w39v_firmwarel3u61az8z07ab5l04ak0q17a_firmwareg1w39vz8z05af2a76ax3a92a_firmwareb3g84a_firmwarel3u67a_firmwarem0p35a_firmwarez8z06a_firmwarel3u59aj8j72acf117acf118a_firmwarel3u64az8z03az8z03a_firmwarel3u51a_firmwarel3u44acf066aj8a05a_firmwarel3u55ab5l04a_firmwarek0q15al3u66a_firmwarek0q19a_firmwarea2w77a_firmwarej7z99a_firmwarej8j67ax3a83az8z01ab5l06a_firmwarez8z10a_firmwaref2a67aj8a05ax3a75ae6b73al3u61a_firmwarej8j64a_firmwareb5l47aj8j76a_firmwareb5l48af2a81az8z15ax3a78ab5l50a_firmwareb5l49a_firmwarej8j67a_firmwarel3u56aj8j63a_firmwarez8z06ab5l54al3u40a_firmwarel3u65al3u64a_firmwarecd644am0p33a_firmwareb5l46az8z00ax3a90am0p36a_firmwarex3a71a_firmwareg1w46a_firmwarel2762aj8j70a_firmwarec2s11a_firmwaree6b71aj8a11af2a76a_firmwarez8z22ab5l05a_firmwarex3a90a_firmwaref2a77a_firmwarex3a89a_firmwarez8z20al3u52acd646az8z10al3u65a_firmwarej7z06aj8j65al3u50a_firmwarex3a72ax3a78a_firmwareg1w40v_firmwarel3u66acf116a_firmwareb3g86ab3g86a_firmwarex3a59a_firmwarem0p39ax3a87ag1w41a_firmwarel3u63a_firmwarej8a04az8z00a_firmwarex3a74aj8j78az8z14a_firmwarek0q20al3u40ak0q22a_firmwarez8z20a_firmwarex3a68ak0q14ad7p71ax3a68a_firmwareg1w47aj8j79a_firmwarez8z12ag1w46ab5l26ax3a69af2a78v_firmwarej8j73af2a70af2a80ax3a93acf367aCertain HP Enterprise Printers, HP PageWide Printers, and MFP Products
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2018-7097
Matching Score-6
Assigner-Hewlett Packard Enterprise (HPE)
ShareView Details
Matching Score-6
Assigner-Hewlett Packard Enterprise (HPE)
CVSS Score-8.8||HIGH
EPSS-0.90% / 74.69%
||
7 Day CHG~0.00%
Published-14 Aug, 2018 | 14:00
Updated-05 Aug, 2024 | 06:17
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery.

Action-Not Available
Vendor-HP Inc.Hewlett Packard Enterprise (HPE)
Product-3par_service_providerHPE 3PAR Service Processors
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2015-5445
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-8.8||HIGH
EPSS-0.09% / 26.96%
||
7 Day CHG~0.00%
Published-05 Jan, 2016 | 11:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-storeonce_backup_system_softwaren/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2015-5451
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.11% / 30.64%
||
7 Day CHG~0.00%
Published-23 Nov, 2015 | 02:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-operations_orchestrationn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2015-1391
Matching Score-6
Assigner-MITRE Corporation
ShareView Details
Matching Score-6
Assigner-MITRE Corporation
CVSS Score-8.8||HIGH
EPSS-0.17% / 38.86%
||
7 Day CHG~0.00%
Published-05 Sep, 2023 | 00:00
Updated-30 Sep, 2024 | 19:18
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.

Action-Not Available
Vendor-n/aHP Inc.
Product-airwaven/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2014-7874
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.16% / 37.52%
||
7 Day CHG~0.00%
Published-19 Oct, 2014 | 01:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-system_management_homepagehp-uxn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2012-5216
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.13% / 33.52%
||
7 Day CHG~0.00%
Published-28 Mar, 2013 | 23:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-procurve_switch_1700-24procurve_switch_1700-8procurve_switch_softwaren/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2013-6192
Matching Score-6
Assigner-HP Inc.
ShareView Details
Matching Score-6
Assigner-HP Inc.
CVSS Score-6.8||MEDIUM
EPSS-0.12% / 31.53%
||
7 Day CHG~0.00%
Published-17 Dec, 2013 | 02:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aHP Inc.
Product-operations_orchestrationn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2020-7201
Matching Score-6
Assigner-Hewlett Packard Enterprise (HPE)
ShareView Details
Matching Score-6
Assigner-Hewlett Packard Enterprise (HPE)
CVSS Score-8.8||HIGH
EPSS-0.18% / 40.52%
||
7 Day CHG~0.00%
Published-18 Dec, 2020 | 22:20
Updated-04 Aug, 2024 | 09:25
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloaders. The vulnerability could be remotely exploited to allow Cross-site Request Forgery (CSRF).

Action-Not Available
Vendor-n/aHP Inc.
Product-storeever_msl2024_firmwarestoreever_msl2024storeever_1\/8_g2_tape_autoloaderstoreever_1\/8_g2_tape_autoloader_firmwareHPE StoreEver MSL Tape Libraries; HPE StoreEver 1/8 G2 Tape Autoloaders
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2014-6187
Matching Score-4
Assigner-IBM Corporation
ShareView Details
Matching Score-4
Assigner-IBM Corporation
CVSS Score-6||MEDIUM
EPSS-0.25% / 48.32%
||
7 Day CHG~0.00%
Published-24 Dec, 2014 | 11:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Action-Not Available
Vendor-n/aIBM Corporation
Product-websphere_service_registry_and_repositoryn/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2010-5084
Matching Score-4
Assigner-MITRE Corporation
ShareView Details
Matching Score-4
Assigner-MITRE Corporation
CVSS Score-6||MEDIUM
EPSS-0.12% / 31.84%
||
7 Day CHG~0.00%
Published-14 Feb, 2012 | 20:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The cross-site request forgery (CSRF) protection mechanism in e107 before 0.7.23 uses a predictable random token based on the creation date of the administrator account, which allows remote attackers to hijack the authentication of administrators for requests that add new users via e107_admin/users.php.

Action-Not Available
Vendor-e107n/a
Product-e107n/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2015-7925
Matching Score-4
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
ShareView Details
Matching Score-4
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
CVSS Score-8||HIGH
EPSS-0.21% / 43.67%
||
7 Day CHG~0.00%
Published-23 Dec, 2015 | 11:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentication of administrators for requests that trigger firmware upload, removal of configuration data, or a reboot.

Action-Not Available
Vendor-ewonn/a
Product-ewon_firmwaren/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2010-1150
Matching Score-4
Assigner-Red Hat, Inc.
ShareView Details
Matching Score-4
Assigner-Red Hat, Inc.
CVSS Score-6||MEDIUM
EPSS-0.45% / 62.73%
||
7 Day CHG~0.00%
Published-20 Apr, 2010 | 15:00
Updated-11 Apr, 2025 | 00:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

MediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to conduct phishing attacks by arranging for a victim to login to the attacker's account and then execute a crafted user script, related to a "login CSRF" issue.

Action-Not Available
Vendor-n/aWikimedia Foundation
Product-mediawikin/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2021-21665
Matching Score-4
Assigner-Jenkins Project
ShareView Details
Matching Score-4
Assigner-Jenkins Project
CVSS Score-8.8||HIGH
EPSS-0.07% / 22.98%
||
7 Day CHG~0.00%
Published-10 Jun, 2021 | 14:25
Updated-03 Aug, 2024 | 18:23
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in Jenkins.

Action-Not Available
Vendor-Jenkins
Product-xebialabs_xl_deployJenkins XebiaLabs XL Deploy Plugin
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2014-4816
Matching Score-4
Assigner-IBM Corporation
ShareView Details
Matching Score-4
Assigner-IBM Corporation
CVSS Score-6||MEDIUM
EPSS-0.08% / 25.48%
||
7 Day CHG~0.00%
Published-23 Sep, 2014 | 22:00
Updated-12 Apr, 2025 | 10:46
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Action-Not Available
Vendor-n/aIBM Corporation
Product-websphere_application_servern/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
  • Previous
  • 1
  • 2
  • 3
  • 4
  • Next
Details not found