HP Insight Control Performance Management < 6.3 Multiple Vulnerabilities

According to its version number, the HP Insight Control Performance Management install on the remote Windows host is affected by multiple vulnerabilities : - An unspecified vulnerability could allow remote authenticated users to gain elevated privileges. CVE-2011-1544 - A cross-site request forge...

HP Insight Control Performance Management Installed

HP Insight Control Performance Management is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid55748; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"HP Insight Contro...

CVE-2011-1545: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-1544: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors...

HP Insight Control Performance Management security vulnerabilities

Crossite request forgery, privilege escalation...

CVE-2010-4032

CVE-2010-4032 is a CSRF vulnerability in HP Insight Control Performance Management for Windows, pre-6.2, that could allow remote attackers to hijack user authentication via unknown vectors. The security bulletin indicates HP released v6.2 or later to resolve the issue; apply the update or equival...

CVE-2010-4030

HP Insight Control Performance Management for Windows is affected by CVE-2010-4030 (XSS). The vulnerability exists in versions prior to 6.2 and could allow remote injection of arbitrary script/HTML via unspecified vectors. HP’s security bulletin (HPSBMA02602 rev.1) confirms the issue and states t...

CVE-2010-4100

HP Insight Control Performance Management for Windows (before 6.1 update 2) is affected by CVE-2010-4100. The vulnerability enables remote attackers to download/read arbitrary files via unknown vectors. HP’s security bulletin HP HPSBMA02600 (SSRT100239 rev.1) confirms the affected software and st...

CVE-2010-4100: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control Performance Management before 6.1 update 2 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2010-4031: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2010-4032: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-4030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...