CVE Vulnerabilities

CVE-2016-4377

Published: Aug 22, 2016 | Modified: Nov 28, 2016
CVSS 3.x
8.1
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.6 HIGH
AV:N/AC:H/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite (CISSS) before 2.13.1, Power Advisor before 7.8.2, Insight Management Sizer before 16.12.1, Synergy Planning Tool before 3.3, SAP Sizing Tool before 16.12.1, Sizing Tool for SAP Business Suite powered by HANA before 16.11.1, Sizer for ConvergedSystems Virtualization before 16.7.1, Sizer for Microsoft Exchange Server before 16.12.1, Sizer for Microsoft Lync Server 2013 before 16.12.1, Sizer for Microsoft SharePoint 2013 before 16.13.1, Sizer for Microsoft SharePoint 2010 before 16.11.1, and Sizer for Microsoft Skype for Business Server 2015 before 16.5.1 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Converged_infrastructure_solution_sizer_suite Hp * 2.13.0 (including)
Insight_management_sizer Hp * 16.12.0 (including)
Power_advisor Hp * 7.8.1 (including)
Sap_sizing_tool Hp * 16.12.0 (including)
Sizer_for_converged_systems_virtualization Hp * 16.7.0 (including)
Sizer_for_microsoft_exchange_server_2010 Hp * 16.12.0 (including)
Sizer_for_microsoft_exchange_server_2013 Hp * 16.12.0 (including)
Sizer_for_microsoft_exchange_server_2016 Hp * 16.12.0 (including)
Sizer_for_microsoft_lync_server_2013 Hp * 16.12.0 (including)
Sizer_for_microsoft_sharepoint_2010 Hp * 16.11.0 (including)
Sizer_for_microsoft_sharepoint_2013 Hp * 16.13.0 (including)
Sizer_for_microsoft_skype_for_business_server_2015 Hp * 16.5.0 (including)
Sizing_tool_for_sap_business_suite_powered_by_hana Hp * 16.11.0 (including)
Storage_sizing_tool Hp * 13.0 (including)
Synergy_planning_tool Hp * 3.2 (including)

References