CVE-2015-5404
CVE-2015-5404 is a high-severity vulnerability in Hp Systems Insight Manager with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 2.0 base score 7.5)
- EPSS exploit prediction: 4% (88th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Hp Systems Insight Manager
- Published:
- Last modified:
Description
HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
Frequently asked questions
- What is CVE-2015-5404?
- HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
- How severe is CVE-2015-5404?
- CVE-2015-5404 has a CVSS 2.0 base score of 7.5, rated high severity.
- Is CVE-2015-5404 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (88th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2015-5404?
- CVE-2015-5404 affects Hp Systems Insight Manager. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2015-5404?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2015-5404 published?
- CVE-2015-5404 was published on 2015-08-27 and last updated on 2026-06-17.
References
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04762744
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04774019
Affected products (1)
- cpe:2.3:a:hp:systems_insight_manager:*:*:*:*:*:*:*:*
More vulnerabilities in Hp Systems Insight Manager
- CVE-2007-2719 — Critical (CVSS 10.0): Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to…
- CVE-2020-7200 — Critical (CVSS 9.8): A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The…
- CVE-2016-4366 — Critical (CVSS 9.8): HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or…
- CVE-2015-3113 — Critical (CVSS 9.8): Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows…
- CVE-2016-2029 — Critical (CVSS 9.1): HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data…
- CVE-2016-2018 — Critical (CVSS 9.1): HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information or modify data…