CSRF in Hp Service Manager
CVE-2013-6202
Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) insert XSS sequences or (2) execute arbitrary code.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.023 (81.4th percentile) — read the EPSS interpretation.
Affected products
- Hp Service_manager — versions 9.30, 9.31, 9.32
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)