EUVD-2016-5392

Malware in sbrugna...

CVE-2016-4392

A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1...

CVE-2016-4392

CVE-2016-4392 matches a remote cross-site scripting vulnerability in HP Business Service Management (BSM) software versions 9.1x and 9.20–9.25IP1. The issue concerns an input handling/output encoding flaw that allows attacker-supplied script to run in a victim’s browser, potentially compromising ...

CVE-2016-4405

HP Business Service Management (BSM) is affected by a remote code execution vulnerability in the Apache Commons Collections Java deserialization implementation, specifically versions 9.20–9.26. The issue arises from deserializing untrusted data, enabling an attacker to execute arbitrary code in t...

PT-2018-4913

Name of the Vulnerable Software and Affected Versions HP Business Service Management software versions 9.1x, 9.20 through 9.25IP1 Description A remote cross-site scripting issue has been identified. Recommendations For versions 9.1x, update to a version that is not affected by this issue. For...

CVE-2016-4392: Improper Neutralization of Input During Web Page Generation

A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1...

CVE-2016-4405: Deserialization of Untrusted Data

A remote code execution vulnerability was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization versions v9.20-v9.26...

PT-2018-4921

Name of the Vulnerable Software and Affected Versions HP Business Service Management BSM versions v9.20 through v9.26 Description A remote code execution issue was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization. Recommendations For HP Busines...

PT-2012-4102

Name of the Vulnerable Software and Affected Versions HP Business Service Management BSM version 9.12 Description The issue allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component. This is achieved by uploading crafted .war files due to improper...

CVE-2012-2561: Undefined Security Weakness

HP Business Service Management BSM 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444...

HP Business Service Management Remote Code Execution

HP Business Service Management BSM 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444. Recent assessments: wchen-r7 at Septembe...

PT-2011-2248

Name of the Vulnerable Software and Affected Versions HP Business Availability Center BAC versions 7.x through 7.55 HP Business Availability Center BAC versions 8.x through 8.05 HP Business Service Management BSM versions prior to 9.01 Description A cross-site scripting XSS issue allows remote...