Security Vulnerabilities fixed in HPE System Management Homepage HPESBMU03753

Description

A local authentication bypass, arbitrary command execution, security misconfiguration, buffer overflow, denial of service (DoS), cross-site scripting (XSS) vulnerabilities in HPE System Management Homepage for Windows version prior to v7.6.1 was found.

Affected Applications

HP System Management Homepage

CVE References

CVE-2017-12553 CVE-2017-12552 CVE-2017-12551 CVE-2017-12550 CVE-2017-12549 CVE-2017-12548 CVE-2017-12547 CVE-2017-12546 CVE-2017-12545 CVE-2017-12544

Other References

https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbmu03753en_us