Hp System Management Homepage vulnerabilities, page 4
77 vulnerabilities
Known vulnerabilities in Hp System Management Homepage, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2010-3011hpsystem_management_homepage
EPSS score3.53%
CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.CVE-2010-3012hpsystem_management_homepageEPSS score1.70%
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue was originally assigned CVE-2010-3010 due to a CNA error.CVE-2017-12551hpsystem_management_homepageEPSS score0.45%
A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.CVE-2017-12544hewlett packard enterprisesystem management homepage for windows and linux+1EPSS score4.52%
A cross-site scripting vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.CVE-2017-12550hewlett packard enterprisesystem management homepage for windows and linux+1EPSS score0.31%
A local security misconfiguration vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.CVE-2017-12546hewlett packard enterprisesystem management homepage for windows and linux+1EPSS score0.35%
A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.CVE-2017-12548hewlett packard enterprisesystem management homepage for windows and linux+1EPSS score0.41%
A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.CVE-2017-12552hewlett packard enterprisesystem management homepage for windows and linux+1EPSS score0.41%
A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.CVE-2017-12549hewlett packard enterprisesystem management homepage for windows and linux+1EPSS score0.31%
A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.CVE-2017-12547hewlett packard enterprisesystem management homepage for windows and linux+1EPSS score0.41%
A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.CVE-2017-12545hewlett packard enterprisesystem management homepage for windows and linux+1EPSS score6.57%
A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.CVE-2017-12553hewlett packard enterprisesystem management homepage for windows and linux+1EPSS score0.31%
A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.CVE-2009-1418hpsystem_management_homepageEPSS score2.85%
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2009-4185hpsystem_management_homepageEPSS score2.77%
Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter.CVE-2023-50271hpsystem_management_homepage+1EPSS score0.50%
A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability could be exploited locally or remotely to disclose information.CVE-2006-1023hpsystem_management_homepageEPSS score5.16%
Directory traversal vulnerability in HP System Management Homepage (SMH) 2.0.0 through 2.1.4 on Windows allows remote attackers to access certain files via unspecified vectors.CVE-2006-1774hpcompaqhttpserver+1EPSS score2.83%
HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL.