CVE-2013-6202: Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33...

Security readout for executives and security teams

HP Service Manager versions 9.30 through 9.33 were reported vulnerable to CSRF. In business terms, an attacker could potentially misuse a signed-in user’s browser to trigger unwanted actions, including inserting script content or causing arbitrary code execution. The source bundle does not provide CVSS scoring or detailed remediation text. Exposure is most likely where HP Service Manager 9.30 through 9.33 remains deployed, especially if reachable by users through browsers. The bundle’s structured affected-product fields are incomplete, so asset validation should rely on product/version inventory rather than CPE matching alone. Treat this as a high-priority legacy enterprise application risk if affected versions are still present. The arbitrary-code-execution impact raises business urgency, but remediation planning should be grounded in HP vendor guidance because the supplied sources do not include patch details. Mitigation focus: Identify any HP Service Manager 9.30, 9.31, 9.32, or 9.33 deployments.; Check HP advisory SSRT101437 for vendor-directed fixes or supported upgrade guidance.; Prioritize remediation for internet-facing or broadly accessible Service Manager environments..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.