HP Service Manager Detection

Binary data hpservicemanagerdetect.nbin...

HP Service Manager 9.30.x / 9.31.x / 9.32.x / 9.33.x / 9.34.x / 9.35.x < 9.35.6007 / 9.40.x / 9.41.x < 9.41.6000 / 9.50.x / 9.51.x Remote SQL Injection

The HP Service Manager application running on the remote host is version 9.30.x; 9.31.x; 9.32.x; 9.33.x; 9.34.x; 9.35.x prior to 9.35.6007; 9.40.x; 9.41.x prior to 9.41.6000; 9.50.x; or 9.51.x. It is, therefore, affected by an SQL injection vulnerability. Note that Nessus has not tested for these...

HP Service Manager SQL Injection Vulnerability

HP Service Manager is a cloud-based help desk management solution that helps organizations handle change and incident management. An SQL injection vulnerability exists in HP Service Manager. The vulnerability arises because the Service Manager web tier does not properly validate user-supplied...

HP Service Manager RCE Vulnerability (Jul 2016)

HP Service Manager is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HP Service Manager Multiple Vulnerabilities (Jul 2016)

HP Service Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:hp:servicemanager"; if...

HP Service Manager multiple security vulnerabilities

Crossite scripting, unauthorized access, privilege escalation...

[security bulletin] HPSBMU03079 rev.1 - HP Service Manager, Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04388127 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04388127 Version: 1 HPSBMU03079 rev....

CVE-2014-2633

Cross-site request forgery CSRF vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-2632

Unspecified vulnerability in the WebTier component in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-2634

Unspecified vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors...

CVE-2013-6222

Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the WebTier component in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2633

Cross-site request forgery CSRF vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-6222

Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2632

Unspecified vulnerability in the WebTier component in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-2634

HP Service Manager (SM) exposed vulnerability CVE-2014-2634 affecting SM versions 7.21 and 9.x prior to 9.34. The server component could be accessed in a way that bypasses intended access controls, allowing remote attackers to modify data or cause a denial of service via unspecified vectors. The ...

CVE-2013-6222

CVE-2013-6222 affects HP Service Manager (SM) Mobility Web Client and Service Request Catalog components. The XSS vulnerability exists in SM versions 7.21 and 9.x before 9.34, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The HP security bulletin (HPSBMU03079)...