CVE-2007-2719: HP Systems Insight Manager

High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days.

Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.

Affected products

• HP Systems Insight Manager: version 4.2 only; version 5.0 only

Published 2007-05-16. Last modified 2026-06-16.