CVE-2016-8525

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A Remote Disclosure of Information vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
Hewlett Packard Enterprise	iMC PLAT	v7.2 E0403P06 and earlier

References

http://www.securityfocus.com/bid/95912Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037756Third Party Advisory, VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05382418Vendor Advisory
https://www.tenable.com/security/research/tra-2017-09Third Party Advisory
http://www.securityfocus.com/bid/95912Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037756Third Party Advisory, VDB Entry
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05382418Vendor Advisory
https://www.tenable.com/security/research/tra-2017-09Third Party Advisory

Timeline

Published: Feb 15, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-85268.8Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a way to permit XML p CVE-2016-85276.1Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS). The vulnerability is p CVE-2016-85288.8A Remote Escalation of Privilege vulnerability in HPE Helion Eucalyptus version 3.3.0 through 4.3.1 was found.CVE-2016-85297.6A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS versio CVE-2016-85307.5A remote denial of service vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7 CVE-2016-85315.3A remote information disclosure vulnerability in HPE Matrix Operating Environment version 7.6 was found.CVE-2016-85325.4A cross site scripting vulnerability in HPE Matrix Operating Environment version 7.6 was found.CVE-2016-85338.8A remote priviledge escalation vulnerability in HPE Matrix Operating Environment version 7.6 was found.CVE-2016-85348.8A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found.CVE-2016-85353.5A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found.CVE-2016-85616.6A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Users with CVE-2016-85627.5A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under spec