Known vulnerabilities in HPE Service Manager

Vendor: Hewlett Packard Enterprise Development LP
Software: HPE Service Manager
Software CPE: cpe:2.3:a:hewlett_packard_enterprise_development_lp:hpe_service_manager:*:*:*:*:*:*:*:*
Website: https://www.hpe.com/us/en/home.html
Total vulnerabilities: 15
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HPE Service Manager HPE Service Manager is affected by 15 known vulnerabilities: 1 critical, 1 high, 11 medium, 2 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64535 - Resource Management Errors
CVE-2012-4534		 CWE-399 Low
No
No
 9.31.2004 p2 21.06.2022 SB2013042902
#VU64530 - Cross-Site Request Forgery (CSRF)
CVE-2012-4431		 CWE-352 Medium
No
No
 9.31.2004 p2 21.06.2022 SB2013042902
#VU64512 - Permissions, Privileges, and Access Controls
CVE-2012-3546		 CWE-264 Medium
No
No
 9.31.2004 p2 20.06.2022 SB2013042902
#VU64502 - Improper input validation
CVE-2012-2733		 CWE-20 Medium
No
No
 9.31.2004 p2 20.06.2022 SB2013042902
#VU12591 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-6494		 CWE-89 Low
No
No
 - 11.05.2018 SB2018051401
#VU5373 - Exposure of sensitive information to an unauthorized actor
CVE-2014-0160		 CWE-200 Critical
Available
Exploited
 9.33.3000 p3 25.01.2017 SB2014040101
SB2015092619
SB2014040801
and 28 more
#VU5214 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2014-3566		 CWE-327 Medium
Available
No
 7.11.752 p23, 9.21.755 P10, 9.34.4001 p4, 9.40.1002 p1 20.01.2017 SB2014101601
SB2014102102
SB2016022401
and 78 more
#VU152 - Memory corruption
CVE-2016-1998		 CWE-119 High
No
No
 - 15.07.2016 SB2016071501
#VU90 - Exposure of sensitive information to an unauthorized actor
CVE-2015-2808		 CWE-200 Medium
No
No
 - 05.07.2016 SB2015040102
SB2015040103
SB2023011274
and 27 more
#VU86 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2015-4000		 CWE-300 Medium
Available
No
 - 04.07.2016 SB2015071003
SB2015070202
SB2015072201
and 36 more
#VU41411 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2014-3509		 CWE-362 Medium
No
No
 7.11.720 p22, 9.21.706 P9, 9.34.2003 p2 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 9 more
#VU41413 - Improper input validation
CVE-2014-3511		 CWE-20 Medium
No
No
 7.11.720 p22, 9.21.706 P9, 9.34.2003 p2 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 10 more
#VU41415 - Improper input validation
CVE-2014-5139		 CWE-20 Medium
No
No
 7.11.720 p22, 9.21.706 P9, 9.34.2003 p2 14.08.2014 SB2014081406
SB2014080704
SB2014122605
and 7 more
#VU43698 - Heap-based Buffer Overflow
CVE-2012-3456		 CWE-122 Medium
Available
No
 9.31.2004 p2 20.08.2012 SB2012082015
SB2012092504
SB2013042902
#VU2950 - Cryptographic Issues
CVE-2014-0224		 CWE-310 Medium
Available
No
 7.11.720 p22, 9.21.706 P9, 9.34.2003 p2 30.11.-0001 SB2014060501
SB2014060502
SB2014060503
and 42 more