CVE-2014-2633

Description

Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/95449

http://www.securitytracker.com/id/1030756

http://www.securityfocus.com/bid/69376

http://secunia.com/advisories/60714

http://secunia.com/advisories/60028

http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c04388127

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS