CVE-2012-2012

critical HPE
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
4.5%
Exploitation probability in 30 days
Top 11% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: June 29, 2012 (5067 days ago)
Last Modified: April 29, 2026
Vendor: HPE
Source: NVD

Description

HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

CWE

NVD-CWE-Other

Affected Products

hp system management homepage

References

🔗 h20000.www2.hp.com 🔗 h20000.www2.hp.com