Vulnerabilities > HP > Service Manager Service Request Catalog

DATE CVE VULNERABILITY TITLE RISK
2016-06-19 CVE-2016-4371 Cross-Site Request Forgery (CSRF) vulnerability in HP products
HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.
network
hp CWE-352
6.0