Improper input validation in HP System Management Homepage

CVE-2010-3283

Open redirect vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.014 (70.3th percentile) — read the EPSS interpretation.

Affected products

Hp System_management_homepage — versions 2.1.4-143, 2.1.11-197, 2.1.0-109
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)