CVE-2016-4395

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4394

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue...

CVE-2016-4393

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

Buffer overflow

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

Buffer overflow

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

Design/Logic Flaw

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue...

Cross site scripting

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

CVE-2016-4393

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

CVE-2016-4394

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue...

CVE-2016-4395

HP System Management Homepage (SMH) before v7.6 is vulnerable to remote code execution via a stack/buffer overflow in the SetSMHData handling of admin-group parameters (mod_smh_config.so). Exploitation is described in ZDI-16-587, with unauthenticated remote access leading to code execution under ...

CVE-2016-4396

CVE-2016-4396 affects HPE System Management Homepage (SMH) prior to v7.6. The vulnerability is a remote code execution stemming from an overflow in mod_smh_config.so when handling the TKN parameter (SSO proxy path). An unauthenticated, remote attacker can exploit this to execute arbitrary code on...

CVE-2016-4393

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

CVE-2016-4396

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4394

HP System Management Homepage (SMH) vulnerable to CVE-2016-4394: an HSTS bypass allows remote attackers to obtain sensitive information on SMH versions prior to 7.6. The connected OpenVAS/NVT entries corroborate an HSTS-related disclosure vulnerability affecting HP SMH, but detailed technical spe...

CVE-2016-4393

HP/HPE System Management Homepage (SMH) is affected by CVE-2016-4393, a cross-site scripting vulnerability in versions before 7.6. The issue allows a remote authenticated attacker to obtain sensitive information via unspecified vectors. Affected product/version: SMH prior to v7.6. Root cause: XSS...

CVE-2016-4395

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

HP Data Protector Remote Command Execution (CVE-2016-2004)

An arbitrary command execution vulnerability exists in the HPE Data Protector. A remote, unauthenticated attacker could exploit this vulnerability by sending malformed requests to a HPE Data Protector service. Successful exploitation could lead to arbitrary command execution under the context of...

HPE Sizer for Microsoft Exchange Server Detection (Windows SMB Login)

Detects the installed version of HPE Sizer for Microsoft Exchange Server. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HPE Sizer for Microsoft Lync Server Remote Arbitrary Code Execution Vulnerability

HPE Sizer for Microsoft Lync Server is prone to a remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

HPE Sizer for Microsoft Exchange Server Remote Arbitrary Code Execution Vulnerability

HPE Sizer for Microsoft Exchange Server is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...