CVE-2007-2719

critical HPE
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
7.5%
Exploitation probability in 30 days
Top 8% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: May 16, 2007 (6937 days ago)
Last Modified: April 23, 2026
Vendor: HPE
Source: NVD

Description

Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.

CWE

CWE-287

Affected Products

hp systems insight manager

References

🔗 h20000.www2.hp.com 🔗 osvdb.org 🔗 secunia.com 🔗 www.acrossecurity.com 🔗 www.securityfocus.com