CVSS 3.0
7.7 highCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:NCVE-2016-4374
HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information or cause a denial of service, via unspecified vectors.
Severity
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWE
- CWE-918
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:release_control