← Vulnerability feed

Vulnerability record · CVE-2016-4378 · published 26 August 2016

CVE-2016-4378: Hp xp 9000 command view information exposure vulnerability

Hp · Xp 9000 Command View

The (1) Device Manager, (2) Tiered Storage Manager, (3) Replication Manager, (4) Replication Monitor, and (5) Hitachi Automation Director (HAD) components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers to obtain sensitive information via unspecified vectors.

7.5 CVSS 3.0 High EPSS 2.6% · top 14.9% CWE-200 · Information exposure
7.5CVSS 3.0 base score, v2 5.0
2.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

The (1) Device Manager, (2) Tiered Storage Manager, (3) Replication Manager, (4) Replication Monitor, and (5) Hitachi Automation Director (HAD) components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers to obtain sensitive information via unspecified vectors.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/92649
http://www.securitytracker.com/id/1036686
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05241355 Vendor Advisory
http://www.securityfocus.com/bid/92649
http://www.securitytracker.com/id/1036686
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05241355 Vendor Advisory

Track CVE-2016-4378 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.0CVE-2018-3183Oracle jdk vulnerabilityVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected a…EPSS 2.8%8.3CVE-2018-3169Oracle jdk vulnerabilityVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE:…EPSS 4.4%8.3CVE-2018-3149Oracle jdk vulnerabilityVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Ja…EPSS 7.2%8.3CVE-2018-2814Oracle jdk vulnerabilityVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE:…EPSS 4.0%8.3CVE-2018-2633Oracle jdk vulnerabilityVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Ja…EPSS 5.7%8.1CVE-2019-2697Oracle jdk vulnerabilityVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Diffi…EPSS 11%8.1CVE-2019-2698Oracle jdk vulnerabilityVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Diffi…EPSS 12%7.7CVE-2018-2794Oracle jdk vulnerabilityVulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, …EPSS 0.72%

Source: NIST National Vulnerability Database (record CVE-2016-4378), CISA KEV, FIRST EPSS (scores of 2026-10-03). This page is refreshed as NVD updates the record.