Information disclosure in Hp Xp7_command_view

CVE-2016-4378

The (1) Device Manager, (2) Tiered Storage Manager, (3) Replication Manager, (4) Replication Monitor, and (5) Hitachi Automation Director (HAD) components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Comma…

Vulnerability class: Information Disclosure

EPSS: 0.008 (74.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
  • 1036686 (vdb-entry, x_refsource_SECTRACK)
  • 92649 (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2016-4378?
CVE-2016-4378 is a high-severity vulnerability in Hp Xp7_command_view, classified under Information Disclosure. CVSS score: 7.5/10. Published 2016-08-26.
How severe is CVE-2016-4378?
High severity. CVSS v3 base score is 7.5 out of 10.