HP Operations Manager i Apache Flex BlazeDS External Entity Injection Vulnerability

The remote HP Operations Manager i host is affected by an XML external entity XXE vulnerability in the bundled version of Apache Flex BlazeDS due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. A remote attacker can exploit this, via a specially...

Code injection

Unspecified vulnerability in HP Operations Manager i OMi 9.22, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2015-2137

HP Operations Manager i (OMi) versions 9.22–10.01 are affected by an unspecified remote code execution vulnerability (CVE-2015-2137). The issue allows remote code execution via unknown vectors and is rated high/severe (CVSSv2 base 9.3, impact C/I/A). HP’s Security Bulletin HPSBGN03393 rev.1 notes...

PT-2015-1941

Name of the Vulnerable Software and Affected Versions HP Operations Manager i versions 9.22 through 10.01 Description The issue is related to errors in the code of the HP Operations Manager i system. It allows a remote attacker to execute arbitrary code. Recommendations For versions 9.22 through...

CVE-2015-2137: Undefined Security Weakness

Unspecified vulnerability in HP Operations Manager i OMi 9.22, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2015-2107: Improper Access Control

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...

PT-2015-5612

Name of the Vulnerable Software and Affected Versions HP Operations Manager i Management Pack versions 1.x before 1.01 for SAP Description The issue allows local users to execute OS commands by leveraging SAP administrative privileges. Recommendations For HP Operations Manager i Management Pack...

PT-2014-4811

Name of the Vulnerable Software and Affected Versions HP Operations Manager i versions 9.1 through 9.13 HP Operations Manager i versions 9.2 through 9.24 Description The issue allows remote authenticated users to execute arbitrary code by leveraging the OMi operator role. Recommendations For...

CVE-2014-2607: Undefined Security Weakness

Unspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows remote authenticated users to execute arbitrary code by leveraging the OMi operator role...