CVEvulnerability
CVE-2013-6202
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-02-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) insert XSS sequences or (2) execute arbitrary code.
Affected configurations
• hp service manager 9.30
• hp service manager 9.31
• hp service manager 9.32
• hp service manager 9.33
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04117626 Vendor Advisory
- http://www.securitytracker.com/id/1029803 www.securitytracker.com
- http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04117626 Vendor Advisory
- http://www.securitytracker.com/id/1029803 www.securitytracker.com