Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2016-10-28	CVE-2016-4393	Cross-site Scripting vulnerability in HP System Management Homepage HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue. network low complexity hp CWE-79	5.4
2016-03-18	CVE-2016-1994	Information Exposure vulnerability in HP System Management Homepage HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors. network low complexity hp CWE-200	6.5