CVE-2012-2003

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-05-02 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected products

HP Insight Management Agents: through 8.70.0.0; 6.30.0.0, 6.31.0.0-b, 6.40.0.0, 7.0.0.0, 7.10.0.0, 7.20.0.0 (+26)

References

http://osvdb.org/81666
http://secunia.com/advisories/49054
http://www.securityfocus.com/archive/1/522548
http://www.securityfocus.com/bid/53341
http://www.securitytracker.com/id?1027003
https://exchange.xforce.ibmcloud.com/vulnerabilities/75312
http://osvdb.org/81666
http://secunia.com/advisories/49054
http://www.securityfocus.com/archive/1/522548
http://www.securityfocus.com/bid/53341
http://www.securitytracker.com/id?1027003
https://exchange.xforce.ibmcloud.com/vulnerabilities/75312

Get alerted when CVE-2012-2003 or the next vulnerability affects your stack