EUVD-2016-5392

Malware in sbrugna...

CVE-2016-4392

A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1...

CVE-2016-4392

CVE-2016-4392 matches a remote cross-site scripting vulnerability in HP Business Service Management (BSM) software versions 9.1x and 9.20–9.25IP1. The issue concerns an input handling/output encoding flaw that allows attacker-supplied script to run in a victim’s browser, potentially compromising ...

CVE-2016-4405

HP Business Service Management (BSM) is affected by a remote code execution vulnerability in the Apache Commons Collections Java deserialization implementation, specifically versions 9.20–9.26. The issue arises from deserializing untrusted data, enabling an attacker to execute arbitrary code in t...

CVE-2016-4392: Improper Neutralization of Input During Web Page Generation

A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1...

CVE-2016-4405: Deserialization of Untrusted Data

A remote code execution vulnerability was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization versions v9.20-v9.26...

HP Business Service Management Remote Code Execution

HP Business Service Management BSM 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444. Recent assessments: wchen-r7 at Septembe...