[security bulletin] HPSBST02919 rev.1 - HP XP P9000 Command View Advanced Edition Suite Software, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03898171 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03898171 Version: 1 HPSBST02919 rev....

HP/HPE Onboard Administrator Detection (HTTP)

Detection of HP/HPE Onboard Administrator. The script sends a connection request to the server and attempts to detect HP/HPE Onboard Administrator and to extract its version. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

HP Onboard Administrator < 3.50 Multiple Security Vulnerabilities

HP Onboard Administrator is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HP LoadRunner micWebAjax.dll ActiveX NotifyEvent Method Vulnerability

Added: 09/30/2013 CVE: CVE-2013-2368 BID: 61436 OSVDB: 95639 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the micWebAjax ActiveX control. Problem HP LoadRunner before 11.52 is vulnerable to remote code execution due to failure to sanitize user-suppli...

HP LoadRunner micWebAjax.dll ActiveX NotifyEvent Method Vulnerability

Added: 09/30/2013 CVE: CVE-2013-2368 BID: 61436 OSVDB: 95639 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the micWebAjax ActiveX control. Problem HP LoadRunner before 11.52 is vulnerable to remote code execution due to failure to sanitize user-suppli...

HP LoadRunner micWebAjax.dll ActiveX NotifyEvent Method Vulnerability

Added: 09/30/2013 CVE: CVE-2013-2368 BID: 61436 OSVDB: 95639 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the micWebAjax ActiveX control. Problem HP LoadRunner before 11.52 is vulnerable to remote code execution due to failure to sanitize user-suppli...

HP LoadRunner micWebAjax.dll ActiveX NotifyEvent Method Vulnerability

Added: 09/30/2013 CVE: CVE-2013-2368 BID: 61436 OSVDB: 95639 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the micWebAjax ActiveX control. Problem HP LoadRunner before 11.52 is vulnerable to remote code execution due to failure to sanitize user-suppli...

HP Data Protector CRS Opcode 235 Stack Buffer Overflow (CVE-2013-2325)

A stack buffer overflow has been discovered in HP Data Protector. The vulnerability exists in the Cell Request service crs.exe, which listens on a randomly chosen port. The application fails to sanitize input with opcode 235, which can result in a stack buffer overflow. A remote, unauthenticated...

HP OpenView Communication Broker Arbitrary File Deletion (HPSBMU02691)

According to its self-reported version, the version of the HP OpenView Communication Broker service running on the remote host has a vulnerability that could allow an unauthenticated attacker to delete arbitrary files on the system. Successful exploits will result in a denial of service condition...

HP Multiple Network Products Unspecified Information Disclosure and Remote Code Execution (HPSBHF02888)

The remote HP router or switch could be missing a vendor-supplied update that corrects an issue that a malicious attacker could remotely exploit in order to cause a disclosure of information or execution of code. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70172;...

HP NNMi 8.x / 9.0x / 9.1x / 9.20 Unspecified XSS

According to its version number, the web interface for HP Network Node Manager i NNMi installed on the remote host is affected by an unspecified cross-site scripting vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70147; scriptversion"1.6";...

HP Network Node Manager i (NNMi) Console Detection

The remote host is running the Network Node Manager i NNMi console, a web interface for managing NNMi. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70146; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

HP Onboard Administrator Multiple Vulnerabilities

The remote web server is a version of HP Onboard Administrator OA that is affected by the following vulnerabilities : - HP Onboard Administrator before 3.50 allows remote attackers to obtain sensitive information via unspecified vectors. CVE-2012-0130 - HP Onboard Administrator before 3.50 allows...

HP Onboard Administrator Detection

HP Onboard Administrator was found. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70140; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Onboard Administrator Detection"; scriptsummaryenglish:"Check XML data response.";...

HP System Management Homepage ginkgosnmp.inc Command Injection

According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is earlier than 7.2.2 and is, therefore, reportedly affected by a command injection vulnerability. An input validation error exists in the file 'ginkgosnmp.inc' related to the la...

Fedora Update for hplip FEDORA-2013-17127

Check for the Version of hplip OpenVAS Vulnerability Test Fedora Update for hplip FEDORA-2013-17127 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

HP Network Automation Multiple Vulnerabilities (HPSBMU02693)

The HP Network Automation server is susceptible to XSS and SQL injection attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid70100; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

HP System Management Homepage vulnerable to a denial-of-service condition

Overview HP System Management Homepage 7.2.0.14 and possibly earlier versions contain a denial-of-service vulnerability CWE-121. Description CWE-121: Stack-based Buffer Overflow HP System Management Homepage 7.2.0.14 contains a denial-of-service vulnerability. The remote attacker may send the...

HP Network Automation Remote Unauthorized Access (HPSBMU02738)

The HP Network Automation server has a remote unauthorized access vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70101; scriptversion"1.7"; scriptcvsdate"Date: 2018/11/15 20:50:23"; scriptcveid"CVE-2011-4790"; scriptbugtraqid51746; scriptnameenglish:"H...

HP Network Automation Detection

HP Network Automation is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70099; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Network Automation Detection"; scriptsummaryenglish:"Detects HP Network Automation...