CVE-2016-4371: HP Service Manager

High severity, CVSS 8.0. EPSS: 0.8% chance of exploitation in the next 30 days.

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.

Affected products

• HP Service Manager: version 9.30 only; version 9.31 only; version 9.32 only; version 9.33 only; version 9.34 only; version 9.35 only; …
• HP Service Manager Mobility: version 9.30 only; version 9.31 only; version 9.32 only; version 9.33 only; version 9.34 only; version 9.35 only; …
• HP Service Manager Server: version 9.30 only; version 9.31 only; version 9.32 only; version 9.33 only; version 9.34 only; version 9.35 only; …
• HP Service Manager Service Request Catalog: version 9.30 only; version 9.31 only; version 9.32 only; version 9.33 only; version 9.34 only; version 9.35 only; …
• HP Service Manager Web Client: version 9.30 only; version 9.31 only; version 9.32 only; version 9.33 only; version 9.34 only; version 9.35 only; …
• HP Service Manager Windows Client: version 9.30 only; version 9.31 only; version 9.32 only; version 9.33 only; version 9.34 only; version 9.35 only; …

Published 2016-06-19. Last modified 2026-06-17.