KLA10458 Multiple vulnerabilities in HP SMH

Multiple vulnerabilities was found in HP SMH. By exploiting these vulnerabilities malicious users can conduct XSS, CSRF and clicjacking attacks via unspecified vectors. These vulnerabilities can be exploited remotely.

Original advisories

HP bulletin

Related products

HP-System-Management-Homepage

CVE list

CVE-2013-6712 critical

CVE-2013-6422 warning

CVE-2014-2641 high

CVE-2014-2640 warning

CVE-2014-2642 warning

CVE-2013-6420 critical

CVE-2013-4545 warning

Solution

Update to latest version

Get HP SMH

Impacts

• XSS/CSS

Cross site scripting. Exploitation of vulnerabilities with this impact can lead to partial interception of information transmitted between user and site.

Affected Products

• HP System Management Homepage (SMH) versions earlier than 7.4