CVE-2017-13983

CRITICAL

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to bypass authentication.

Published: Sep 30, 2017 Modified: Jun 17, 2026

CWE-287

CVSS Metrics

CVSSv3

Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (3)

Vendor	Product	Version
hp	bsm_platform_application_performance_management_system_health	9.26
hp	bsm_platform_application_performance_management_system_health	9.30
hp	bsm_platform_application_performance_management_system_health	9.40

GitHub Security Advisory GHSA-gxw4-rxhh-r3fv

An authentication vulnerability in HPE BSM Platform Application Performance Management System...

References (6)

Risk Scores

CVSS Score 9.8 / 10

EPSS Score 6.06%

Top 7% most likely to be exploited

Threat Score 41 / 100

Data Sources

NVD EPSS GitHub