5666 matches found
Sql injection
A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...
Design/Logic Flaw
A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...
CVE-2016-8517
A cross site scripting vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found...
Remote code execution
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2016-8517
A cross site scripting vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found...
CVE-2016-8522
A cross-site scripting vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found...
CVE-2016-8511
A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found...
CVE-2016-8516
A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found...
Cross site request forgery (csrf)
A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2016-8520
HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also access versioned data...
CVE-2017-5802
A Remote Gain Privileged Access vulnerability in HPE Vertica Analytics Platform version v4.1 and later was found...
CVE-2016-8517
A cross site scripting vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found...
CVE-2017-12513
CVE-2017-12513 is an RCE in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue is user-controlled input escaping in iMC PLAT’s components, leading to remote code execution. The vulnerability is addressed in PLAT v7.3 (E0506) or later. Related sources (ZDI-1...
CVE-2017-8972
A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...
CVE-2017-5810
A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...
CVE-2017-12559
A Remote Denial of Service vulnerability in HPE Intelligent Management Center iMC PLAT version iMC Plat 7.3 E0504P2 was found...
CVE-2017-5811
CVE-2017-5811 affects HP (HPE) Network Automation 9.1x, 9.2x, 10.0x, 10.1x and 10.2x. The vulnerability is a FileServlet directory traversal information disclosure caused by lack of validation of a user-supplied path, allowing remote attackers to read arbitrary files. The linked sources in the co...
CVE-2017-5812
CVE-2017-5812 affects Hewlett Packard Enterprise HP Network Automation (HP Network Automation). The connected sources describe an authentication bypass in the PermissionFilter class, enabling a remote attacker to bypass authentication and reach a vulnerable servlet. Affected product versions incl...
CVE-2017-8945
CVE-2017-8945 concerns HPE IceWall Federation Agent v3.0 with a remote unauthorized information disclosure vulnerability. The CNVD entry describes an information disclosure issue that could enable a remote attacker to redirect users to an arbitrary website and conduct a phishing attack. Details a...