CVE-2023-50271: HP-UX System Management Homepage, Disclosure of Information

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-17 · updated 2026-06-17
Weakness: CWE-200

Description

A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability could be exploited locally or remotely to disclose information.

Affected products

Hewlett Packard Enterprise System Management Homepage for Windows and Linux: before a.3.2.23.09 — fixed in a.3.2.23.09

How to fix

Upgrade to a fixed version: Hewlett Packard Enterprise System Management Homepage for Windows and Linux a.3.2.23.09. Check the vendor advisory for mitigations.

References

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbux04551en_us
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbux04551en_us

Get alerted when CVE-2023-50271 or the next vulnerability affects your stack