High

DATE	CVE	VULNERABILITY TITLE	RISK
2016-06-19	CVE-2016-4371	Cross-Site Request Forgery (CSRF) vulnerability in HP products HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components. network low complexity hp CWE-352	8.0
2016-05-30	CVE-2016-2025	Information Exposure vulnerability in HP Service Manager HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components. network low complexity hp CWE-200	7.5