What is CVE-2010-1586?

CVE-2010-1586 is a vulnerability in HP System Management Homepage, classified under Improper Input Validation. Published 2010-04-28.

Is CVE-2010-1586 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in HP System Management Homepage

CVE-2010-1586

Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.103 (95.2th percentile) — read the EPSS interpretation.

Affected products

Hp System_management_homepage — versions 2.2.6, 2.1.2-127, 2.1.11-197
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2010-1586?: CVE-2010-1586 is a vulnerability in HP System Management Homepage, classified under Improper Input Validation. Published 2010-04-28.
Is CVE-2010-1586 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.