CVE-2016-1995
CriticalSummary
HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.
Risk Assessment
This vulnerability could lead to system takeover, posing a serious security threat to the organization.
Recommendation
It is recommended to update HPE System Management Homepage to version 7.5.4 or later to mitigate this vulnerability.
Other vulnerabilities in HPE System Management Homepage
See all- CVE-2016-4396High
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a 'Buffer Overflow' issue.
- CVE-2016-4395High
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a 'Buffer Overflow' issue.
- CVE-2016-2015High
HPE System Management Homepage before version 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors.
- CVE-2016-1996High
HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors.
- CVE-2016-1993High
HPE System Management Homepage before version 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
Original NVD description (English source)
HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.