CVE-2017-12544

CVE-2017-12544: vulnerability in Hewlett Packard Enterprise System Management…

Published · Updated

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 4.5%
exploitation probability
4.5%top 9% of all CVEs
observed exploitation
nono source reports it
A cross-site scripting vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.
Affected products
Hewlett Packard Enterprise · System Management Homepage for Windows and Linux
Related CVEs — Hewlett Packard Enterprise System Management…

In the same product, most dangerous first.

CVE-2017-12545—CVE-2017-12545EPSS 6.6%CVE-2017-12552—CVE-2017-12552EPSS 0.4%CVE-2017-12547—CVE-2017-12547EPSS 0.4%CVE-2017-12548—CVE-2017-12548EPSS 0.4%CVE-2017-12546—CVE-2017-12546EPSS 0.3%CVE-2017-12550—CVE-2017-12550EPSS 0.3%
References
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03753en_ushttp://www.securityfocus.com/bid/101029http://www.securitytracker.com/id/1039437