System Management Homepage vulnerabilitiesAnd the versions its exploited flaws hit.
System Management Homepage is made by HP. We track 78 published vulnerabilities in it, across 90 versions. 2 of them are on the list of flaws known to be exploited, the newest added on 25 May 2022. If you run System Management Homepage, check your version against the exploited flaws below and patch those first.
The most recent System Management Homepage flaw added to the known-exploited list is CVE-2015-8651, on 25 May 2022. We keep watching the known-exploited list.
Which versions of System Management Homepage do the exploited flaws hit?
Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.
Which System Management Homepage vulnerabilities are being exploited?
2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8Adobe Flash Player Integer Overflow Vulnerability
Integer overflow in Adobe Flash Player allows attackers to execute code.
- 9.8Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
Which System Management Homepage flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 67%CVE-2013-3576Critical
ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en.
- 56%CVE-2016-5387High
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow...
- 51%CVE-2016-5388High
Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the...
- 50%CVE-2016-5385High
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable,...
- 50%CVE-2015-4024Medium
Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service...
- 30%CVE-2015-3145High
The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly...
- 14%CVE-2015-3148Medium
cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
- 12%CVE-2011-1541Critical
Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote attackers to bypass intended access restrictions, and consequently execute arbitrary code, via unknown vectors.
Running System Management Homepage? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Integer overflow in Adobe Flash Player allows attackers to execute code.
- Matched to
- System Management Homepage on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 78 published vulnerabilities listed under the name System Management Homepage, across 90 versions. The most recent System Management Homepage flaw added to the known-exploited list is CVE-2015-8651, on 25 May 2022.
2 are on the list of flaws known to be exploited. The most recently added are CVE-2015-8651 and CVE-2015-3113.
Create a Precursor Intelligence account and track System Management Homepage. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.