CVE-2016-1993
https://notcve.org/view.php?id=CVE-2016-1993
HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. HPE System Management Homepage en versiones anteriores a 7.5.4 permite a usuarios remotos autenticados obtener información sensible o modificar datos a través de vectores no especificados. • http://www.securitytracker.com/id/1035325 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763 •
CVE-2016-1994
https://notcve.org/view.php?id=CVE-2016-1994
HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors. HPE System Management Homepage en versiones anteriores a 7.5.4 permite a usuarios remotos autenticados obtener información sensible a través de vectores no especificados. • http://www.securitytracker.com/id/1035325 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2016-1996
https://notcve.org/view.php?id=CVE-2016-1996
HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors. HPE System Management Homepage en versiones anteriores a 7.5.4 permite a usuarios locales obtener información sensible o modificar datos a través de vectores no especificados. • http://www.securitytracker.com/id/1035325 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763 •
CVE-2016-1995
https://notcve.org/view.php?id=CVE-2016-1995
HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors. HPE System Management Homepage en versiones anteriores a 7.5.4 permite a atacantes remotos ejecutar código arbitrario a través de vectores no especificados. • http://www.securitytracker.com/id/1035325 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763 •
CVE-2015-2134
https://notcve.org/view.php?id=CVE-2015-2134
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Vulnerabilidad de Cross-site request forgery (CSRF) en HP System Management Homepage (SMH) en sus versiones anteriores a la 7.5.0 permite a usuarios remotos autenticados secuestrar la autenticación de víctimas no especificadas a través de vectores desconocidos. • http://marc.info/?l=bugtraq&m=144050155601375&w=2 http://www.securityfocus.com/bid/75961 http://www.securitytracker.com/id/1033014 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04746490 • CWE-352: Cross-Site Request Forgery (CSRF) •