CVE-2016-4367

The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-4368

CVE-2016-4368 affects HPE Universal CMDB products (UCMDB Server/Configuration Manager/Universal Discovery) versions 10.0–10.21. The root cause is unsafe deserialization of unauthenticated Java objects to the Apache Commons Collections (ACC) library, enabling remote code execution. Impact is remot...

CVE-2016-4368: Improper Input Validation

HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

PT-2016-5914

Name of the Vulnerable Software and Affected Versions HPE Universal CMDB versions 10.0 through 10.21 HPE Universal CMDB Configuration Manager versions 10.0 through 10.21 HPE Universal Discovery versions 10.0 through 10.21 Description The issue allows remote attackers to execute arbitrary commands...

PT-2016-5913

Name of the Vulnerable Software and Affected Versions HPE Universal CMDB versions 10.0 through 10.21 Description The Universal Discovery component in HPE Universal CMDB allows remote attackers to obtain sensitive information via unspecified vectors. Recommendations For HPE Universal CMDB versions...

CVE-2016-4367: Exposure of Sensitive Information to an Unauthorized Actor

The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-2001

HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified vectors...

CVE-2016-2001

HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified vectors...

Information disclosure

HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified vectors...

CVE-2016-2001

The CVE-2016-2001 entry concerns HP Universal CMDB Foundation (UCMDB) versions 10.0, 10.01, 10.10, 10.11, and 10.20. Affected component: UCMDB Foundation; issue type: information disclosure and URL redirection due to unvalidated input. Root cause (per CNVD-2016-02189): the vulnerability arises fr...

CVE-2016-2001

HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified vectors...

PT-2016-4954

Name of the Vulnerable Software and Affected Versions HPE Universal CMDB Foundation versions 10.0 through 10.20 Description The issue allows remote attackers to obtain sensitive information or conduct URL redirection attacks. Recommendations For versions 10.0 through 10.20, at the moment, there i...

CVE-2016-2001: Undefined Security Weakness

HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified vectors...

TeemIp - IP Address Management Solution

All network administrators do recognize how important it is to have a well managed IP space: a comprehensive and up to date inventory of all subnets and IPs used in a network as well as clear and simple processes to request, change or release IPs are underlying key factors for a trouble free...

Information Disclosure Vulnerability in JP1/Integrated Management - Universal CMDB

Overview An information disclosure vulnerability was found in JP1/Integrated Management - Universal CMDB. Impact When UCMDB server uses UD probe DFM probe, malicious remote users can acquire data stored in UD probe DFM probe, by sending crafted HTTP request to server. Solution Please refer to the...

HP Universal Configuration Management Database Data Flow Probe Gateway Detection

Binary data hpucmdbprobegatewaydetect.nbin...

HP Universal CMDB JMX Console Authentication Bypass (CVE-2014-7883)

An authentication bypass vulnerability exists in HP Universal CMDB. The vulnerability is in the JMX Console web application. The vulnerability is due to a design weakness in processing HTTP requests that are neither GET nor POST. A remote unauthenticated attacker can exploit this vulnerability by...

CVE-2014-7883

HP Universal CMDB UCMDB Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response...

CVE-2014-7883

CVE-2014-7883 affects HP Universal CMDB (UCMDB) Server/JMX Console. The vulnerability arises from access control that only protects GET/POST; an attacker can use HTTP HEAD to bypass authentication and add/obtain admin access. Public references show affected UCMDB versions (e.g., 10.10, with menti...

PT-2015-3940

Name of the Vulnerable Software and Affected Versions HP Universal CMDB UCMDB Probe versions 9.05, 10.01, and 10.11 Description The issue allows remote attackers to obtain sensitive information by reading the headers of a response, as the HTTP TRACE method is enabled. Recommendations For versions...