CVE-2016-8563

Siemens Automation License Manager ALM before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service ALM service outage via crafted packets to TCP port 4410...

Sql injection

SQL injection vulnerability in Siemens Automation License Manager ALM before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410...

Information disclosure

Siemens Automation License Manager ALM before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets...

Design/Logic Flaw

Siemens Automation License Manager ALM before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service ALM service outage via crafted packets to TCP port 4410...

CVE-2016-8565

Siemens ALM (Automation License Manager) vulnerable to a remote path-traversal flaw in all versions before 5.3 SP3 Update 1. A remote attacker can send crafted packets to ALM to write/rename files, create or delete directories. Remediation: update to ALM version 5.3 SP3 Update 1; restrict access ...

CVE-2016-8564

SQL injection vulnerability in Siemens Automation License Manager ALM before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410...

CVE-2016-8565

Siemens Automation License Manager ALM before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets...

CVE-2016-8563

Siemens Automation License Manager ALM before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service ALM service outage via crafted packets to TCP port 4410...

CVE-2016-8563

CVE-2016-8563 affects Siemens Automation License Manager (ALM) prior to version 5.3 SP3 Update 1 . A remote attacker can trigger a denial of service by sending specially crafted packets to TCP port 4410 , causing the ALM service to outage (requires manual restart). The CVSS context in the provide...

CVE-2016-8564

Siemens Automation License Manager (ALM) is affected by CVE-2016-8564 through SQL injection in ALM before 5.3 SP3 Update 1. an attacker can send crafted traffic to port 4410/TCP to execute arbitrary SQL commands that may read or modify configuration data. The issue stems from improper handling of...

CVE-2014-2631

Unspecified vulnerability in HP Application Lifecycle Management aka Quality Center 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138...

Code injection

Unspecified vulnerability in HP Application Lifecycle Management aka Quality Center 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138...

CVE-2014-2631

Unspecified vulnerability in HP Application Lifecycle Management aka Quality Center 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138...

[security bulletin] HPSBMU02934 rev.1 - HP Application LifeCycle Management, GossipService SOAP Request, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03969436 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03969436 Version: 1 HPSBMU02934 rev....

HP Application LifeCycle Management security vulnerabilities

Different code execution vulnerabilities...

CVE-2013-4836

Unspecified vulnerability in the GossipService SOAP Request implementation in the Synchronizer component before 1.4.2 in HP Application LifeCycle Management ALM allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1759...

CVE-2013-4834

Unspecified vulnerability in the client component in HP Application LifeCycle Management ALM before 11 p11 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1327...

Design/Logic Flaw

Unspecified vulnerability in the GossipService SOAP Request implementation in the Synchronizer component before 1.4.2 in HP Application LifeCycle Management ALM allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1759...

CVE-2013-4834

CVE-2013-4834 affects HP Application LifeCycle Management (ALM) client component prior to ALM v11 p11, allowing remote execution of arbitrary code due to an unspecified vulnerability vector. The HP/HP Zero Day Initiative bulletin (and related HP security notes) states that a patch is available: u...

CVE-2013-4834

Unspecified vulnerability in the client component in HP Application LifeCycle Management ALM before 11 p11 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1327...