CVE-2012-2012

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-06-29 · updated 2026-06-16

Description

HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected products

Hewlett Packard Enterprise System Management Homepage for Windows and Linux: through 7.1.0-16; 2.0.0, 2.0.1, 2.0.1.104, 2.0.2, 2.0.2.106, 2.1 (+68)

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Get alerted when CVE-2012-2012 or the next vulnerability affects your stack