5666 matches found
CVE-2017-5788
A Local Disclosure of Sensitive Information vulnerability in HPE NonStop Software Essentials version T0894 T0894H02 through T0894H02^AAI was found...
CVE-2017-12494
CVE-2017-12494 describes a remote code execution vulnerability in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically affecting PLAT 7.3 with build E0504. The issue allows an attacker to execute arbitrary code on affected systems. Resolution is documented in PLAT v...
CVE-2017-5827
A verified CVE-2017-5827 entry describes a reflected cross-site scripting (XSS) vulnerability in HPE Aruba ClearPass Policy Manager . Affected software is listed as 6.6.x ; one connected source notes that versions prior to 6.6.5 are affected. The vulnerability stems from an issue in the web inter...
CVE-2017-8971
CVE-2017-8971 is a documented clickjacking vulnerability in HP Matrix Operating Environment (MOE) version 7.6 LR1. The connected sources identify HP MOE as the affected product and characterize the issue as a clickjacking vulnerability in its web-facing interface. The NVD entry provides CVSS scor...
CVE-2017-8973
CVE-2017-8973 describes an improper input validation vulnerability in HPE Matrix Operational Environment (HPE MOE) version 7.6 LR1 . The available documentation identifies the root cause as input validation flaws within the product, leading to potential impact described as unspecified in the prov...
CVE-2017-8969
CVE-2017-8969 affects HPE Insight Control 7.6 LR1. The vulnerability stems from improper input validation in the product, enabling potential impact on integrity (I: HIGH) with no confidentiality or availability impact according to CVSSv3, and a network attack vector with low complexity. Exploitat...
CVE-2017-8946
The CVE-2017-8946 entry identifies a Remote Code Execution vulnerability in the HPE Aruba AirWave Glass software, affecting versions v1.0.0 and v1.0.1 . Public descriptions indicate a vulnerability exists in AirWave Glass that could allow an attacker to execute arbitrary code remotely, but the pr...
CVE-2017-12553
A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...
CVE-2016-8532
A cross site scripting vulnerability in HPE Matrix Operating Environment version 7.6 was found...
CVE-2016-8535
A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found...
CVE-2016-8534
CVE-2016-8534 corresponds to a remote privilege-elevation vulnerability in HPE Matrix Operating Environment (MOE) 7.6; CNVD-2018-05101 also states SIM (Systems Insight Manager) 7.6 is affected. The vulnerability allows an attacker to elevate privileges on affected MOE/SIM installations. Documente...
CVE-2016-8532
Affected products: HPE Matrix Operating Environment Software (v7.6) and Systems Insight Manager (SIM) Software (v7.6). Vulnerability: Cross-site scripting in the web interface. Root cause / exploitability: XSS vulnerability that could allow a remote attacker to inject arbitrary Web script or HTML...
CVE-2016-8518
CVE-2016-8518 describes a remote denial-of-service in HPE Systems Insight Manager (SIM) affecting all versions prior to 7.6. The provided documents identify SIM as the affected product but do not specify the underlying root cause, vulnerable component, or exploit details. No explicit remediation ...
CVE-2016-8512
CVE-2016-8512 concerns a remote code execution in all versions of HP LoadRunner and Performance Center via the MMS protocol. The connected sources identify a buffer overflow/RCE in the MMS handling (MMS Protocol Buffer Overflow) that can be exploited remotely by an unauthenticated attacker to exe...
CVE-2017-8950
HP SiteScope (HP) versions 11.2x–11.3x are affected by CVE-2017-8950, a vulnerability in the ss_pu.jar crypto library that uses a broken or risky cryptographic algorithm, enabling partial information disclosure of credentials. Root cause: use of weak crypto; impact: potential exposure of sensitiv...
CVE-2017-8948
CVE-2017-8948 describes a remote bypass of security restrictions in HP/NNMi (HPE Network Node Manager i) software. Affected are NNMi versions v10.0x, v10.1x, and v10.2x. The CVSS metrics indicate high severity (CVSSv3: 9.8) with unauthenticated network access and no user interaction required; imp...
CVE-2017-12549
CVE-2017-12549: A local authentication bypass in Hewlett Packard Enterprise System Management Homepage (SMH) for Windows and Linux prior to v7.6.1. The vulnerability could allow an attacker with local access to bypass authentication and obtain full confidentiality and integrity of the SMH interfa...
CVE-2017-8960
An Authentication Bypass vulnerability in HPE MSA 1040 and MSA 2040 SAN Storage IN version GL220P008 and earlier was found...
CVE-2017-12513
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...