CVE-2017-14350: Missing Authentication for Critical Function

A potential security vulnerability has been identified in HPE Application Performance Management BSM Platform versions 9.26, 9.30, 9.40. The vulnerability could be remotely exploited to allow code execution...

CVE-2017-13982: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files...

CVE-2017-14349: Improper Privilege Management

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data...

CVE-2017-13985: Improper Limitation of a Pathname to a Restricted Directory

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to traverse directory leading to disclosure of information...

CVE-2017-13983: Improper Authentication

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to bypass authentication...

CVE-2017-13984: Improper Authentication

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal...

CVE-2017-14350

A potential security vulnerability has been identified in HPE Application Performance Management BSM Platform versions 9.26, 9.30, 9.40. The vulnerability could be remotely exploited to allow code execution...

CVE-2017-14350

The CVE-2017-14350 issue affects HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, and 9.40. The confirmed root cause relates to the hpbsmsdr web service used by the Staging Data Replicator, which listens on port 29921 and lacks authentication, enabling remote code execut...

CVE-2017-14349

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data...

CVE-2017-13983

CVE-2017-13983 describes an authentication bypass vulnerability in the HPE BSM Platform Application Performance Management System Health (Health) suite, affecting versions 9.26, 9.30 and 9.40. The flaw enables remote attackers to bypass authentication, with the ZDI advisory noting the System Heal...

CVE-2017-13985

The CVE-2017-13985 issue affects HPE BSM Platform Application Performance Management System Health (versions 9.26, 9.30, 9.40). The vulnerability is a path traversal/authentication flaw in the Email Servlet that leads to information disclosure. The ZDI advisory notes that exploitation requires au...

CVE-2017-13982

A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files...

CVE-2017-13983

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to bypass authentication...

CVE-2017-13982

HPE BSM Platform Application Performance Management System Health suffers a directory traversal/unrestricted file upload flaw in versions 9.26, 9.30, and 9.40. The root cause involves the UploadManager servlet failing to validate user-supplied paths, enabling an attacker to upload arbitrary files...

CVE-2017-13985

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to traverse directory leading to disclosure of information...

CVE-2017-14349

CVE-2017-14349 affects HPE SiteScope versions 11.2x and 11.3x. The issue allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data. The vulnerability’s root cause is described as an authentication weakness enabling broader read access; exploitati...

CVE-2017-13984

The CVE-2017-13984 issue affects Hewlett Packard Enterprise’s BSM Platform Application Performance Management System Health (HPE BSM Health) with versions 9.26, 9.30 and 9.40. The vulnerability resides in the SHExportToExcel servlet, where a directory-traversal flaw allows remote attackers to del...

CVE-2017-13984

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal...

PT-2017-3553

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC PLAT version 7.3 E0506 Description: A Remote Code Execution issue exists due to insufficient input validation in the dbman.exe executable of the HPE Intelligent Management Center PLAT platform. This allow...

HPE Intelligent Management Center getSelInsBean Expression Language Injection (CVE-2017-12490)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to insufficient handling of a parameter used by the getSelInsBean method that was received from a prior GWT RPC request. A remote, authenticated attacker can exploit this...