CVE-2018-7077: Undefined Security Weakness

A security vulnerability in HPE XP P9000 Command View Advanced Edition CVAE Device Manager DevMgr 8.5.0-00 and prior to 8.6.0-00, Configuration Manager CM 8.5.0-00 and prior to 8.6.0-00 could be exploited to allow local and remote unauthorized access to sensitive information...

CVE-2018-7090: Improper Neutralization of Input During Web Page Generation

HPE XP P9000 Command View Advanced Edition Software CVAE has local and remote cross site scripting vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr...

PT-2018-17896

Name of the Vulnerable Software and Affected Versions HPE XP P9000 Command View Advanced Edition Software CVAE versions 7.0.0-00 through earlier than 8.60-00 of DevMgr, TSMgr and RepMgr. Description The issue is related to an open URL redirection. Recommendations For versions 7.0.0-00 through...

PT-2018-17895

Name of the Vulnerable Software and Affected Versions HPE XP P9000 Command View Advanced Edition Software CVAE versions 7.0.0-00 through earlier than 8.60-00 of DevMgr, TSMgr and RepMgr. Description The issue is related to a local and remote cross-site scripting vulnerability. Recommendations For...

CVE-2018-7091: URL Redirection to Untrusted Site

HPE XP P9000 Command View Advanced Edition Software CVAE has open URL redirection vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr...

PT-2016-5924

Name of the Vulnerable Software and Affected Versions HPE XP P9000 Command View Advanced Edition Software versions prior to 8.4.1-00 HPE XP7 Command View Advanced Edition Suite versions prior to 8.4.1-00 Description The issue allows remote attackers to obtain sensitive information via unspecified...

CVE-2016-4378: Exposure of Sensitive Information to an Unauthorized Actor

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...