CVE-2012-1994

MediumCVSS 5.7/10Last modified Jun 16, 2026

Description

HP Systems Insight Manager before 7.0 allows a remote user on adjacent network to access information

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
HP	HP Systems Insight Manager	before 7.0

References

http://www.securityfocus.com/bid/53315Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1026987Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/75294Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/53315Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1026987Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/75294Third Party Advisory, VDB Entry

Timeline

Published: Feb 10, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-19953.2Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows local users to obtain sensitive information or modify data v CVE-2012-19964.3Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to modify data via unknown vectors.CVE-2012-19977.5Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to obtain sensitive information, modify dat CVE-2012-19986.8Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to obtain sensitive information, modify dat CVE-2012-19998.5Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote authenticated users to obtain sensitive information o CVE-2012-20007.5Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execu CVE-2012-200016.1PrestaShop before 1.5.2 allows XSS via the "<object data='data:text/html" substring in the message field.CVE-2012-200027.5TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to CVE-2012-200036.1Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attacker CVE-2012-200046.1K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in CVE-2012-200056.1SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers t CVE-2012-20014.3Cross-site scripting (XSS) vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to inject arbitrary web script or