CVE-2016-4384

CVE-2016-4384 applies to HPE LoadRunner and HP Performance Center prior to version 12.50. The vulnerability is a remote denial-of-service caused by improper handling of malformed packets in the mchan.dll component. Several connected sources (NVD entry, Nessus plugins) confirm a remote DoS impact ...

CVE-2016-4382

CVE-2016-4382 affects HP/HPE Performance Center versions 11.52, 12.00, 12.01, 12.20 and 12.50. The issue allows remote attackers to bypass intended access restrictions via unspecified vectors due to a “remote user validation failure.” Exploitation is described as remote, but concrete attack vecto...

CVE-2016-4384: Undefined Security Weakness

HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors...

PT-2016-5929

Name of the Vulnerable Software and Affected Versions HPE Performance Center versions prior to 12.50 LoadRunner versions prior to 12.50 Description The issue allows remote attackers to cause a denial of service. The exact vectors used for the attack are not specified. Recommendations For HPE...

CVE-2016-4382: Undefined Security Weakness

HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to a "remote user validation failure" issue...

PT-2016-5928

Name of the Vulnerable Software and Affected Versions HPE Performance Center versions 11.52 through 12.50 Description The issue is related to a remote user validation failure, allowing remote attackers to bypass intended access restrictions. Recommendations For versions 11.52 through 12.50, at th...

HPE SAP Sizing Tool Remote Arbitrary Code Execution Vulnerability

HPE SAP Sizing Tool is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-4381

HPE XP7 Command View Advanced Edition CVAE Suite 6.x through 8.x before 8.4.1-02, when Replication Manager RepMgr and Device Manager DevMgr are enabled, allows local users to bypass intended access restrictions via unspecified vectors...

CVE-2016-4381

HPE XP7 Command View Advanced Edition CVAE Suite 6.x through 8.x before 8.4.1-02, when Replication Manager RepMgr and Device Manager DevMgr are enabled, allows local users to bypass intended access restrictions via unspecified vectors...

CVE-2016-4380

Cross-site scripting XSS vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4380

Cross-site scripting XSS vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4379

The TLS implementation in HPE Integrated Lights-Out 3 aka iLO3 firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack...

Design/Logic Flaw

The TLS implementation in HPE Integrated Lights-Out 3 aka iLO3 firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack...

Cross site scripting

Cross-site scripting XSS vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 aka iLO 3 firmware before 1.88, Integrated Lights-Out 4 aka iLO 4 firmware before 2.44, and Integrated Lights-Out 4 aka iLO 4 mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause...

Design/Logic Flaw

HPE XP7 Command View Advanced Edition CVAE Suite 6.x through 8.x before 8.4.1-02, when Replication Manager RepMgr and Device Manager DevMgr are enabled, allows local users to bypass intended access restrictions via unspecified vectors...

CVE-2016-4375

Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 aka iLO 3 firmware before 1.88, Integrated Lights-Out 4 aka iLO 4 firmware before 2.44, and Integrated Lights-Out 4 aka iLO 4 mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause...

CVE-2016-4379

The TLS implementation in HPE Integrated Lights-Out 3 aka iLO3 firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack...

CVE-2016-4381

HPE XP7 Command View Advanced Edition CVAE Suite 6.x through 8.x before 8.4.1-02, when Replication Manager RepMgr and Device Manager DevMgr are enabled, allows local users to bypass intended access restrictions via unspecified vectors...

CVE-2016-4379

The CVE-2016-4379 entry is about HP Integrated Lights-Out 3 (iLO3) firmware pre-1.88, where the TLS implementation improperly uses a MAC protection mechanism with CBC padding, enabling a padding-oracle Vaudenay attack. This can allow an unauthenticated, remote attacker to disclose potentially sen...