CVE-2012-2004

high
Published 2012-05-02 · Modified 2026-04-29
CVSS v3
CVSS v2
8.3
VIR risk
8.3

Description

Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

OS impact

OSVersionStatusFixed in
windows windows-not-affected

Application impact

VendorProductVersionsFixed
hpinsight_management_agents{"endIncluding":"8.70.0.0"}
hpinsight_management_agents6.30.0.0
hpinsight_management_agents6.31.0.0
hpinsight_management_agents6.40.0.0
hpinsight_management_agents7.0.0.0
hpinsight_management_agents7.10.0.0
hpinsight_management_agents7.20.0.0
hpinsight_management_agents7.30.0.0
hpinsight_management_agents7.40.0.0
hpinsight_management_agents7.40.1.0
hpinsight_management_agents7.41.0.0
hpinsight_management_agents7.50.0.0
hpinsight_management_agents7.51.0.0
hpinsight_management_agents7.60.0.0
hpinsight_management_agents7.70.0.0
hpinsight_management_agents7.80.0.0
hpinsight_management_agents7.90.0.0
hpinsight_management_agents7.91.0.0
hpinsight_management_agents7.95.0.0
hpinsight_management_agents8.0.0.0
hpinsight_management_agents8.1.0.0
hpinsight_management_agents8.5
hpinsight_management_agents8.10.0.0
hpinsight_management_agents8.11.0.0
hpinsight_management_agents8.15.0.0
hpinsight_management_agents8.20.0.0
hpinsight_management_agents8.22.0.0
hpinsight_management_agents8.26.0.0
hpinsight_management_agents8.30.0.0
hpinsight_management_agents8.40.0.0
hpinsight_management_agents8.50.0.0
hpinsight_management_agents8.60.0.0
hpinsight_management_agents8.70.0.0

References

CWEs

CWE-20

Verify integrity in audit chain (admin only). AS-IS.