HPE LoadRunner 'libxdrutil.dll mxdr_string method' RCE Vulnerability

HPE LoadRunner is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion

Source: https://blogs.securiteam.com/index.php/archives/3087 SSD Advisory – HPE OpenCall Media Platform OCMP Multiple Vulnerabilities Want to get paid for a vulnerability similar to this one? Contact us at: [email protected] Vulnerabilities Summary The following advisory describes Reflected...

HPE LoadRunner Virtual User Generator RCE Vulnerability

HPE LoadRunner is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HPE LoadRunner Unspecified Remote DoS Vulnerability

HPE LoadRunner is prone to a remote denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HPE LoadRunner Multiple Remote Code Execution and DoS Vulnerabilities

HPE LoadRunner is prone to multiple remote code execution RCE and denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

PT-2017-3621

Name of the Vulnerable Software and Affected Versions: HPE Vertica Analytics Platform versions v4.1 and later Description: The issue is related to insufficient access control in the HPE Vertica Analytics Platform, which can be exploited by a remote attacker to gain elevated privileges...

VMWare Fixes Critical RCE in vCenter Server

VMware patched a critical vulnerability in its vCenter Server platform late last week that could have let an attacker execute arbitrary code in some scenarios. The vulnerability affected two versions of vCenter, 6.5 and 6.0. Users are encouraged to update to the most recent versions, 6.5c, and...

HPESBGN03728 rev.1 - HPE Operations Agent using OpenSSL, Remote Denial of Service (DoS), Unauthorized Access to Data

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Agent - v11.15, v11.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-2107 |...

Java AMF3 deserialization vulnerability analysis-vulnerability warning-the black bar safety net

AMF Action Message Format is a binary serialization format, before the main Flash application in using this format. Recently, the Code White found to have multiple Java AMF library in the presence of vulnerabilities, and these vulnerabilities will lead to unauthenticated remote code execution...

HPESBGN03722 rev.2 - HPE Operations Agent Virtual Appliance, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Agent - v11.11, v11.12, v11.13, v11.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...

PT-2017-16691

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC SOM version v7.3 E0501 Description A Remote Unauthenticated Disclosure of Information issue was discovered, potentially allowing unauthorized access to sensitive information. The vulnerability is related t...

HPE Intelligent Management Center 7.2 E0403P06 Multiple Vulnerabilities

The version of HPE Intelligent Management Center IMC running on the remote host is version 7.2 E0403P06. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in UrlAccessController when handling URIs with the doFilter method. A remote attacker can exploit this, via a specially...

HPE LoadRunner < 12.53 Patch 4 libxdrutil.dll mxdr_string() RCE

The version of HP LoadRunner installed on the remote Windows host is prior to 12.53 patch 4. It is, therefore, affected by a remote code execution vulnerability due to a heap-based buffer overflow condition in the mxdrstring function in libxdrutil.dll. An unauthenticated, remote attacker can...

HPE Smart Storage Administrator Installed

Binary data hpesmartstorageadministratorinstalled.nbin...

HPE Smart Storage Administrator < 2.60.18.0 RCE

The version of HPE Smart Storage Administrator installed on the remote Windows host is prior to 2.60.18.0. It is, therefore, affected by a flaw in function isDirectFileAccess in file ipcelmclient.php due to improper sanitization of user-supplied input to the 'command' variable. An authenticated,...

PT-2017-16689

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 Description A Remote Arbitrary File Download issue was discovered, potentially allowing unauthorized access to files. This issue may be related to a Directory Traversal Remote Cod...

PT-2017-16688

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 Description A Remote Arbitrary Code Execution issue was discovered. This allows for remote code execution, potentially leading to unauthorized access and control of the system...

PT-2017-16690

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center version PLAT 7.2 E0403P06 Description A Local Arbitrary File Download issue was discovered, which can lead to directory traversal and information disclosure. This issue affects the FileDownloadServlet,...

PT-2017-16687

Name of the Vulnerable Software and Affected Versions HPE LoadRunner versions prior to 12.53 Patch 4 HPE Performance Center versions prior to 12.53 Patch 4 Description The issue allows remote attackers to execute arbitrary code via unspecified vectors. This is due to a heap-based buffer overflow ...

PT-2017-3112

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center PLAT version 7.2 E0403P06 Description The issue is related to the doFilter method in the UrlAccessController class, which has weaknesses in its authentication procedure. This can be exploited by a remote...