EUVD-2015-6798

Malware in sbrugna...

CVE-2017-8947

A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found...

CVE-2017-8947

A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found...

Remote code execution

A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found...

CVE-2017-8947

A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found...

CVE-2017-8947

The CVE-2017-8947 entry concerns Hewlett Packard Enterprise Universal CMDB (UCMDB). Reports confirm a remote code execution vulnerability in UCMDB where the UploadFileOnUIServerServlet handles user-supplied paths insecurely, enabling arbitrary code execution. Affected product versions include UCM...

CVE-2017-8947: Improper Limitation of a Pathname to a Restricted Directory

A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found...

HPE UCMDB 'UploadFileOnUIServerServlet' Servlet Path Handling RCE (HPESBGN03758)

The version of HP Universal Configuration Management Database Server UCMDB running on the remote web server is missing a security patch. It is, therefore, affected by a remote code execution vulnerability in the 'UploadFileOnUIServerServlet' servlet due to improper handling of user-supplied paths...

HPESBGN03758 rev.2 - HPE UCMDB, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP UCMDB Configuration Manager Software - v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8947 |...

PT-2016-3256

Name of the Vulnerable Software and Affected Versions HPE UCMDB versions v10.10 through v10.31 Description A Remote Code Execution issue was discovered, related to the UploadFileOnUIServerServlet component in HPE UCMDB. This issue is associated with inadequate path name checking in a directory wi...

CVE-2015-6862

HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors...

Information disclosure

HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors...

CVE-2015-6862

HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors...

CVE-2015-6862

HPE UCMDB Browser is affected by CVE-2015-6862. The vulnerability enables an information-disclosure/unauthorized access bypass in UCMDB Browser versions prior to 4.02 via unspecified vectors. Impact is exposure of sensitive data and potential bypass of access controls. The connected CNVD/NVD entr...

CVE-2015-6862: Exposure of Sensitive Information to an Unauthorized Actor

HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors...

PT-2016-1001

Name of the Vulnerable Software and Affected Versions HPE UCMDB Browser versions prior to 4.02 Description The issue is related to inadequate access control, allowing remote attackers to obtain sensitive information or bypass intended access restrictions. Recommendations For versions prior to 4.0...