Design/Logic Flaw

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

CVE-2016-4378: Exposure of Sensitive Information to an Unauthorized Actor

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

HP P9000 and XP7 Command View Advanced Edition Software Suite Information Disclosure Vulnerability

HP XP P9000 Command View Advanced Edition Suite Software is a device management software from Hewlett-Packard HP that allows storage management of HP XP P9500, XP Disk Array disk array products. An information disclosure vulnerability exists in HP P9000 and XP7 Command View Advanced Edition...

HPE P9000 CVAE Arbitrary Command Execution Vulnerability

HP XP P9000 Command View Advanced Edition is a multifunctional device manager for HP XP P9500, XP Disk Array products. A security vulnerability exists in HPE P9000 Command View Advanced Edition Software CVAE and XP7 CVAE, which allows remote attackers to execute arbitrary commands via constructed...

CVE-2016-2003

Summary: CVE-2016-2003 affects HPE P9000 Command View Advanced Edition Software (CVAE) 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00. Root cause: remote code execution via crafted serialized Java objects, related to the Apache Commons Collections library, due to insecure de...

CVE-2016-2003: Undefined Security Weakness

HPE P9000 Command View Advanced Edition Software CVAE 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

HP XP P9000 Command View Advanced Edition Software Online Help Cross-Site Scripting Vulnerability

HP XP P9000 Command View Advanced Edition Suite Software is a device management software from Hewlett-Packard HP that allows storage management of HP XP P9500, XP Disk Array disk array products. A cross-site scripting vulnerability in HP XP P9000 Command View Advanced Edition Software Online Help...

CVE-2014-7896: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Tiered Storage Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Replication Manager 6.x and 7.x before...

HP XP P9000 Command View Advanced Edition Suite Software crossite scripting

No description provided...

[security bulletin] HPSBST02919 rev.1 - HP XP P9000 Command View Advanced Edition Suite Software, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03898171 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03898171 Version: 1 HPSBST02919 rev....

CVE-2013-4814

Cross-site scripting XSS vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4814

CVE-2013-4814 is an XSS vulnerability in HP XP P9000 Command View Advanced Edition Suite Software. Affected: HP XP P9000 Command View Advanced Edition Suite Software v7.x (7.0.0-00 to

CVE-2013-4814: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3281: Undefined Security Weakness

Unspecified vulnerability in Device Manager in HP XP P9000 Command View Advanced Edition before 7.4.0-00 allows remote attackers to cause a denial of service via unknown vectors...

[security bulletin] HPSBST02839 SSRT101077 rev.1 - HP XP P9000 Command View Advanced Edition, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03650706 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03650706 Version: 1 HPSBST02839...

HP XP P9000 Command View Advanced Edition DoS

No description provided...

CVE-2009-2453: Undefined Security Weakness

Citrix XenApp formerly Presentation Server 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors...

Input validation

The web portal interface in Citrix Access Gateway aka Citrix Advanced Access Control before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or...

CVE-2007-0011

The web portal interface in Citrix Access Gateway aka Citrix Advanced Access Control before Advanced Edition 4.5 HF1 places a session ID in the URL, which allows context-dependent attackers to hijack sessions by reading "residual information", including the a referer log, browser history, or...

CVE-2007-4018

The CVE concerns Citrix Access Gateway Advanced Edition prior to firmware 4.5.5. The vulnerability allows attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors. The Connected documents do not provide concrete exploit details, affected versions beyond ...