Sensitive Information Disclosure in HPE System Management Homepage
CVE-2016-4394
6.5MEDIUM
Key Information:
- Vendor
HP
- Vendor
- CVE Published:
- 28 October 2016
What is CVE-2016-4394?
The HPE System Management Homepage, prior to version 7.6, is susceptible to remote attacks that allow unauthorized users to access sensitive information through unspecified vectors. This issue relates to inadequate implementation of HTTP Strict Transport Security (HSTS), which may expose critical data to potential threat actors.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
HPE System Management Homepage before v7.6 HPE System Management Homepage before v7.6