CVEvulnerability
CVE-2016-2025
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-05-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components.
Affected configurations
• hp service manager 9.30
• hp service manager 9.31
• hp service manager 9.32
• hp service manager 9.33
• hp service manager 9.34
• hp service manager 9.35
• hp service manager 9.40
• hp service manager 9.41
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securitytracker.com/id/1035954 www.securitytracker.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05149290 Patch, Vendor Advisory
- http://www.securitytracker.com/id/1035954 www.securitytracker.com
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05149290 Patch, Vendor Advisory