Cross-Site Scripting Vulnerability in HPE System Management Homepage

CVE-2016-4393

Summary

The HPE System Management Homepage prior to version 7.6 is prone to a cross-site scripting vulnerability that allows remote authenticated attackers to gain unauthorized access to sensitive information. The vulnerability arises from improper handling of user inputs, which can be exploited to inject malicious scripts. If successfully exploited, this could lead to information disclosure or further exploitation within the application environment.

References