PT-2016-5936

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6 Description The issue allows remote authenticated attackers to obtain sensitive information due to an XSS problem. Recommendations For versions prior to 7.6, update to version 7.6 or later t...

PT-2016-5937

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" HTTP Strict Transport Security issue. Recommendations For versions...

PT-2016-5939

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6 Description The issue is related to a "Buffer Overflow" problem, which allows remote attackers to have an unspecified impact. This is a remote code execution vulnerability. Recommendations F...

CVE-2016-4396: Improper Restriction of Operations within the Bounds of a Memory Buffer

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

CVE-2016-4393: Improper Neutralization of Input During Web Page Generation

HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue...

PT-2016-5938

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6 Description The issue is related to a "Buffer Overflow" and allows remote attackers to have an unspecified impact. It is described as a Stack Buffer Overflow Remote Code Execution issue...

CVE-2016-4394: Undefined Security Weakness

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue...

CVE-2016-4395: Improper Restriction of Operations within the Bounds of a Memory Buffer

HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...

HP Data Protector Remote Command Execution (CVE-2016-2004)

An arbitrary command execution vulnerability exists in the HPE Data Protector. A remote, unauthenticated attacker could exploit this vulnerability by sending malformed requests to a HPE Data Protector service. Successful exploitation could lead to arbitrary command execution under the context of...

HPE Sizer for Microsoft Exchange Server Detection (Windows SMB Login)

Detects the installed version of HPE Sizer for Microsoft Exchange Server. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HPE Sizer for Microsoft SharePoint Remote Arbitrary Code Execution Vulnerability

HPE Sizer for Microsoft SharePoint is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HPE Sizer for Microsoft Exchange Server Remote Arbitrary Code Execution Vulnerability

HPE Sizer for Microsoft Exchange Server is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

HPE Sizer for Microsoft Lync Server Remote Arbitrary Code Execution Vulnerability

HPE Sizer for Microsoft Lync Server is prone to a remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

PT-2016-3251

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version 7.3 E0504P2 Description The issue is related to a Remote Code Execution vulnerability. It involves the deserialization of untrusted data in the RMI registry of the HPE Intelligent Management...

HPE Sizing for Microsoft Lync Server Detection (Windows SMB Login)

Detects the installed version of HPE Sizing Tool for Microsoft Lync Server. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HPE Sizing for Microsoft SharePoint Detection (Windows SMB Login)

Detects the installed version of HPE Sizing Tool for Microsoft SharePoint. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HPE Sizing Tool for SAP Business Suite Detection (Windows SMB Login)

Detects the installed version of HPE Sizing Tool for SAP Business Suite. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HPE Sizer for Microsoft Skype for Business Server Remote Arbitrary Code Execution Vulnerability

HPE Sizer for Microsoft Skype for Business Server is prone to a remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

HPE Sizing Tool for SAP Business Suite Remote Arbitrary Code Execution Vulnerability

HPE Sizing Tool for SAP Business Suite is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

HPE Sizer ConvergedSystems Virtualization Detection (Windows SMB Login)

Detects the installed version of HPE Sizer for ConvergedSystems Virtualization. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...