vulnwire
7.5high

CVE-2016-8525

A Remote Disclosure of Information vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
9.0%
percentile 95%
Public exploits
0
none known

A Remote Disclosure of Information vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version.

Exploit prediction (EPSS)

9.04% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.07.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • Hewlett Packard Enterprise iMC PLAT

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • securitytracker.com /id/1037756 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityfocus.com /bid/95912 · vdb-entry, x_refsource_BID, x_transferred
  • tenable.com /security/research/tra-2017-09 · x_refsource_MISC, x_transferred
  • support.hpe.com /hpsc/doc/public/display?docId=emr_na-c05382418 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.