Remote Clickjacking Vulnerability in HPE Diagnostics Products
CVE-2016-8521

6.5MEDIUM

Key Information:

Vendor
HP
Status
Diagnostics
Vendor
CVE Published:
15 February 2018

Summary

A remote clickjacking vulnerability has been identified in HPE Diagnostics that allows an attacker to deceive users into clicking on invisible web elements. This can lead to unintended actions being executed within the application, potentially compromising user data and system security. This vulnerability affects multiple versions of HPE Diagnostics and necessitates immediate attention from IT administrators to mitigate risks associated with unauthorized actions.

Affected Version(s)

Diagnostics 9.24 IP1, 9.26 , 9.26IP1

References

https://support.hpe.com/hpsc/doc/public/display?docId=emr...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1037602
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/95427
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.