HP Insight Control Performance Management < 6.3 Multiple Vulnerabilities

According to its version number, the HP Insight Control Performance Management install on the remote Windows host is affected by multiple vulnerabilities : - An unspecified vulnerability could allow remote authenticated users to gain elevated privileges. CVE-2011-1544 - A cross-site request forge...

HP Insight Control Performance Management Installed

HP Insight Control Performance Management is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid55748; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"HP Insight Contro...

PT-2011-3206

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.3 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified...

PT-2011-3205

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.3 Description The issue allows remote authenticated users to gain privileges via unknown vectors. Recommendations For versions prior to 6.3, update to version 6.3 or later to resolv...

CVE-2011-1545: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-1544: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors...

HP Insight Control Performance Management security vulnerabilities

Crossite request forgery, privilege escalation...

CVE-2010-4100

HP Insight Control Performance Management for Windows (before 6.1 update 2) is affected by CVE-2010-4100. The vulnerability enables remote attackers to download/read arbitrary files via unknown vectors. HP’s security bulletin HP HPSBMA02600 (SSRT100239 rev.1) confirms the affected software and st...

CVE-2010-4032

CVE-2010-4032 is a CSRF vulnerability in HP Insight Control Performance Management for Windows, pre-6.2, that could allow remote attackers to hijack user authentication via unknown vectors. The security bulletin indicates HP released v6.2 or later to resolve the issue; apply the update or equival...

CVE-2010-4030

HP Insight Control Performance Management for Windows is affected by CVE-2010-4030 (XSS). The vulnerability exists in versions prior to 6.2 and could allow remote injection of arbitrary script/HTML via unspecified vectors. HP’s security bulletin (HPSBMA02602 rev.1) confirms the issue and states t...

PT-2010-5248

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions prior to 6.2,...

PT-2010-5246

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.2 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via...

PT-2010-5295

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.1 update 2 Description The issue allows remote attackers to read arbitrary files. Recommendations For versions prior to 6.1 update 2, update to version 6.1 update 2 or later to...

PT-2010-5247

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.2 Description The issue allows remote authenticated users to gain privileges via unknown vectors. Recommendations For versions prior to 6.2, update to version 6.2 or later to resolv...

CVE-2010-4100: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control Performance Management before 6.1 update 2 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2010-4032: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-4031: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2010-4030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...