HPE Intelligent Management Center WebDMServlet Insecure Deserialization (CVE-2017-12558)

An insecure deserialization vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to deserialization of untrusted data by the WebDMServlet while having vulnerable classes in the code path. A remote, unauthenticated attacker can exploit this vulnerability by sending a...

HP iMC Plat 7.2 - Remote Code Execution (2)

HP iMC Plat 7.2 - Remote Code Execution 2 !/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008 Command Injection RCE Date: 11-29-2017 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HPE Intelligent Management Center mibFileServlet file Directory Traversal (CVE-2017-12559)

A directory traversal vulnerability exists in HPE Intelligent Management Center PLAT. The vulnerability is due to an input validation error in the mibFileServlet Servlet. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted packet to a vulnerable server...

HPE Intelligent Management Center PLAT flexFileUpload Arbitrary File Upload (CVE-2017-8961)

An arbitrary file upload vulnerability exists in HPE Intelligent Management Center PLAT. The vulnerability is due to an input validation issue on requests handled by the FileUploadServlet servlet. A remote authenticated attacker could exploit this vulnerability by sending a crafted packet to a...

Design/Logic Flaw

A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service DoS...

CVE-2017-14360

A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service DoS...

CVE-2017-14360

A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service DoS...

CVE-2017-14360 MFSBGN03791 rev.1 - HPE Content Manager Workgroup Service, Denial of Service (DoS)

A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service DoS...

CVE-2017-14360

CVE-2017-14360 affects HPE Content Manager Workgroup Service v9.00. The vulnerability is described as a remote denial-of-service (DoS) condition in the Workgroup Service, with exploitation able to cause service disruption. The available connected documents identify the affected product and the Do...

CVE-2017-14359

A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to allow cross-site scripting...

CVE-2017-14359

A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to allow cross-site scripting...

Cross site scripting

A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to allow cross-site scripting...

CVE-2017-14359

CVE-2017-14359 describes a cross-site scripting vulnerability in HPE Performance Center 12.20 . The issue arises from the product failing to filter user-submitted input, enabling a remote attacker to execute script code in the context of an affected web interface. Connected documents corroborate ...

CVE-2017-14359 MFSBGN03788 rev.1 - HPE Performance Center, Remote Cross-Site Scripting (XSS)

A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to allow cross-site scripting...

HPESBHF03796 rev.1 - HPE RESTful Interface Tool (iLOREST), Local Execution of Arbitrary Code

Potential Security Impact: Local: Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP RESTful Interface Tool 1.5, 2.0 - hprest-1.5-79.x8664.rpm, ilorest-2.0-403.x8664.rpm CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8968...

HPE Baseline Smart Gig SFP 24 Switch Pre-authentication Stored XSS

Vulnerability Summary The following advisory describes an unauthenticated stored XSS in the HPE Baseline Smart Gig SFP 24 / 3Com Baseline Switch 2924 SFP Plus Switch. The vulnerability affect versions: Software Version: 01.00.10 Boot version: 1.0.0.14 Hardware Version: 01.01.0a “On April 12, 2010...

HP/HPE System Management Homepage (SMH) Multiple Remote Vulnerabilities (HPESBMU03753)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

CVE-2017-5789

CVE-2017-5789 affects HP LoadRunner (before 12.53 Patch 4) and HP Performance Center (before 12.53 Patch 4). The root cause is a heap‑based buffer overflow in the libxdrutil.dll mxdr_string function, due to insufficient validation of user data length. This leads to remote code execution without a...

CVE-2017-5789

HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdrstring heap-based buffer overflow...

CVE-2017-5791

CVE-2017-5791 affects Hewlett Packard Enterprise Intelligent Management Center (IMC/iMC) PLAT 7.2 E0403P06. The vulnerability resides in the UrlAccessController.doFilter method, where crafted URIs containing specific strings can bypass authentication remotely. Impact described in connected source...