Vulnerabilities > HP > Service Manager > 7.21

DATE CVE VULNERABILITY TITLE RISK
2014-08-23 CVE-2014-2634 Remote Unauthorized Access vulnerability in HP Service Manager
Unspecified vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors.
network
low complexity
hp
critical
9.4
2014-08-23 CVE-2014-2633 Cross-Site Request Forgery (CSRF) vulnerability in HP Service Manager
Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
network
hp CWE-352
6.8
2014-08-23 CVE-2014-2632 Remote Privilege Escalation vulnerability in HP Service Manager
Unspecified vulnerability in the WebTier component in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors.
network
low complexity
hp
critical
10.0
2014-08-23 CVE-2013-6222 Cross-Site Scripting vulnerability in HP Service Manager
Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC) components in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
hp CWE-79
4.3