CVE-2010-1586
Estado: ModificadaMedia (4.3)—💥 Exploit
Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 10%
- Percentil entre todas las CVEs puntuadas: 96
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
💥 Exploits públicos
Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.
- Publicado en Exploit-DB · HP System Management Homepage - 'RedirectUrl' Open Redirection (25/4/2010)
- Plantilla de Nuclei (detección automática y masiva) · HP System Management Homepage (SMH) v2.x.x.x - Open Redirect
Tecnologías afectadas (1)
CWE
- CWE-20
Referencias
- http://www.securityfocus.com/bid/39676
- http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58107
- http://www.securityfocus.com/bid/39676
- http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58107
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-1586",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-04-28T22:30:00.917",
"references": [
{
"url": "http://www.securityfocus.com/bid/39676",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58107",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/39676",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58107",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter."
},
{
"lang": "es",
"value": "Vulnerabilidad de redireccionamiento directo en red2301.html en HP System Management Homepage (SMH) v2.x.x.x permite a atacantse remotos redireccionar a los usuarios a un sitio web a su elección y provocar ataques phishing a través del parámetro REdirectUrl.\r\n"
}
],
"lastModified": "2026-06-16T23:18:39.537",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD9A9442-18B7-4858-AB3A-19FE272A5C61"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90042282-9151-4D8E-8093-D85E57BD332C"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3EF92B4-AAC3-4957-9D8F-1796C2045962"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D44CEFC1-CE95-4549-A981-C3F259075B77"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.0-103:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C035D5C-90ED-4259-B05C-BEF93D81F42F"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.0-103\\(a\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "824996A5-C2CC-4FC5-8705-F6B4D69F39B6"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.0-109:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DBF9F0E-AA30-4E5A-B23E-DD895303245C"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.0-118:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA2005B3-1914-4B4B-892A-8CCC0F39EF6F"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFA42455-F9B9-49BD-BAFA-4A02C554ECE9"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6426924C-AA5C-4C93-AB8B-9314CD010139"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.2-127:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D7DCF4F-609A-497B-A32E-3D946EC2EE07"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6E5C789-9827-47DF-A47C-454DF7687E59"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.3.132:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D85F0390-B076-4B54-9E4E-67472FF3759E"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29FE29FC-AD24-4C89-9AAC-9D49C54A5CC9"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20EBB25A-A1DE-4943-9EE5-0FCF21A55666"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.5-146:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C43EF082-E9AB-41D3-B7AF-936B84BB6AEE"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B61485E4-6EC1-4886-AB47-F5BC8E72A08A"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.6-156:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "203163D8-15E8-4F2D-A807-7643EA0D6920"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E354FF4-5CDD-4B79-B56C-2C774B235D78"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.7-168:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DAC9CEFE-23C2-4455-BE6F-51D26487D3DA"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3DACC6F-DCE8-4890-BE47-488CB7B2DF77"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.8-177:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D0DA8D6-3B1D-4935-855E-9431EB4BA683"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AFAF26C-7BFE-479E-880C-B13E78780625"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.9-178:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC95912B-8C95-4CA8-BDA7-76074E20E362"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.10-186:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEDD728B-9E92-4EC8-BD61-6E1AE300CE35"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.11-197:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E3E3BC1-A986-4942-80FA-5911428F8E3B"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.12-118:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7038AC00-8A30-49CB-956D-715053A920D2"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.1.12-200:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F425004A-EC16-44E8-A297-21F33F802FE8"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C14DB20-E22E-466E-A3CD-C841CFDF2A6E"
},
{
"criteria": "cpe:2.3:a:hp:system_management_homepage:2.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8881820B-29B4-41DB-AEED-5513A347E290"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}