« Volver al listado

CVE-2016-2001

Estado: ModificadaAlta (7.4)—

HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

HP — Universal Cmbd Foundation

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-2001",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 7.4,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-04-12T23:59:36.510",
  "references": [
    {
      "url": "http://www.securitytracker.com/id/1035505",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073504",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1035505",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073504",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11 y 10.20 permite a atacantes remotos obtener información sensible o llevar a cabo ataques de redireccionamiento de URL a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:43:14.073",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4CC3120E-4D93-48EA-B9BF-52F6977F471D"
            },
            {
              "criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA100E6A-DA01-4218-877C-8BC9BBDB6492"
            },
            {
              "criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BB1F1CD-D4AC-413E-86CE-B9184E598383"
            },
            {
              "criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B771DD1-6E58-4B87-97A3-6AE14C12B934"
            },
            {
              "criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BE51B2D-7DF1-4508-B5A3-032E20A46188"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/601.html\">CWE-601: URL Redirection to Untrusted Site ('Open Redirect')</a>",
  "sourceIdentifier": "cve@mitre.org"
}