43 matches found
CVE-2018-7091: URL Redirection to Untrusted Site
HPE XP P9000 Command View Advanced Edition Software CVAE has open URL redirection vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr...
PT-2018-8482
Name of the Vulnerable Software and Affected Versions HPE XP Command View Advanced Edition Software versions prior to 8.5.3-00 DevMgr versions prior to 8.5.3-00 RepMgr versions prior to 8.5.3-00 HDLM versions prior to 8.5.3-00 Description A Remote Bypass of Security Restrictions issue was...
CVE-2017-8988: Undefined Security Weakness
A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00. The vulnerability impacts DevMgr Earlier than 8.5.3-00 for Windows, Linux, RepMgr earlier than 8.5.3-00 for Windows, Linux and HDLM earlier than 8.5.3-00 f...
CVE-2016-4381
HPE XP7 Command View Advanced Edition CVAE Suite 6.x through 8.x before 8.4.1-02, when Replication Manager RepMgr and Device Manager DevMgr are enabled, allows local users to bypass intended access restrictions via unspecified vectors...
PT-2016-5927
Name of the Vulnerable Software and Affected Versions HPE XP7 Command View Advanced Edition CVAE Suite versions 6.x through 8.x before 8.4.1-02 Description The issue allows local users to bypass intended access restrictions. This occurs when Replication Manager RepMgr and Device Manager DevMgr ar...
CVE-2016-4381: Undefined Security Weakness
HPE XP7 Command View Advanced Edition CVAE Suite 6.x through 8.x before 8.4.1-02, when Replication Manager RepMgr and Device Manager DevMgr are enabled, allows local users to bypass intended access restrictions via unspecified vectors...
Design/Logic Flaw
The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...
PT-2016-5924
Name of the Vulnerable Software and Affected Versions HPE XP P9000 Command View Advanced Edition Software versions prior to 8.4.1-00 HPE XP7 Command View Advanced Edition Suite versions prior to 8.4.1-00 Description The issue allows remote attackers to obtain sensitive information via unspecified...
CVE-2016-4378: Exposure of Sensitive Information to an Unauthorized Actor
The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...
CVE-2016-2003
Summary: CVE-2016-2003 affects HPE P9000 Command View Advanced Edition Software (CVAE) 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00. Root cause: remote code execution via crafted serialized Java objects, related to the Apache Commons Collections library, due to insecure de...
CVE-2016-2003: Undefined Security Weakness
HPE P9000 Command View Advanced Edition Software CVAE 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...
PT-2016-4955
Name of the Vulnerable Software and Affected Versions HPE P9000 Command View Advanced Edition Software CVAE versions 7.x through 8.x before 8.4.0-00 XP7 CVAE versions 7.x through 8.x before 8.4.0-00 Description The issue allows remote attackers to execute arbitrary commands via a crafted serializ...
CVE-2014-7896: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Tiered Storage Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Replication Manager 6.x and 7.x before...
PT-2015-3951
Name of the Vulnerable Software and Affected Versions HP Device Manager versions 6.x through 8.x before 8.1.2-00 HP XP P9000 Command View Advanced Edition Software Online Help affected versions not specified HP XP P9000 Replication Manager versions 6.x and 7.x before 7.6.1-06 HP XP P9000 Tiered...
[security bulletin] HPSBST02919 rev.1 - HP XP P9000 Command View Advanced Edition Suite Software, Remote Cross Site Scripting (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03898171 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03898171 Version: 1 HPSBST02919 rev....
CVE-2013-4814
Cross-site scripting XSS vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2013-5213
Name of the Vulnerable Software and Affected Versions HP XP P9000 Command View Advanced Edition Suite Software versions prior to 7.5.0-02 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versio...
CVE-2013-4814: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-3281: Undefined Security Weakness
Unspecified vulnerability in Device Manager in HP XP P9000 Command View Advanced Edition before 7.4.0-00 allows remote attackers to cause a denial of service via unknown vectors...
PT-2013-1587
Name of the Vulnerable Software and Affected Versions HP XP P9000 Command View Advanced Edition versions prior to 7.4.0-00 Description The issue allows remote attackers to cause a denial of service via unknown vectors. Recommendations For versions prior to 7.4.0-00, update to version 7.4.0-00 or...