Information Disclosure and Data Manipulation Vulnerabilities in HPE Systems Insight Manager
CVE-2016-4366

9.8CRITICAL

Key Information:

Vendor

HP
Status
Systems Insight Manager
Vendor
CVE Published:
8 June 2016

What is CVE-2016-4366?

HPE Systems Insight Manager prior to version 7.5.1 is susceptible to vulnerabilities that permit remote attackers to access sensitive data, alter information, or induce service disruptions through unspecified vectors. This can lead to substantial risks for the confidentiality and integrity of system data, as well as potential interruptions in essential services.

References

https://h20566.www2.hpe.com/hpsc/doc/public/display?docId...
x_refsource_CONFIRM
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/do...
x_refsource_CONFIRM
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/do...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2016-4366 : Information Disclosure and Data Manipulation Vulnerabilities in HPE Systems Insight Manager