NetSight
high8.0

CVE-2016-4371

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data,…

Impact

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.

Affected products

VendorProductAffected versions
HpService Manager
Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35
HpService Manager Mobility
Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35
HpService Manager Server
Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35
HpService Manager Service Request Catalog
Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35
HpService Manager Web Client
Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35
HpService Manager Windows Client
Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35

Weakness classification

References