CVE-2016-4392: HP Business Service Management

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1.

Affected products

• HP Business Service Management: from 9.20, up to and including 9.25; version 9.10 only; version 9.25 only

Published 2018-08-06. Last modified 2026-06-17.