CVE-2016-4375: Undefined Security Weakness

Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 aka iLO 3 firmware before 1.88, Integrated Lights-Out 4 aka iLO 4 firmware before 2.44, and Integrated Lights-Out 4 aka iLO 4 mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause...

CVE-2016-4379: Undefined Security Weakness

The TLS implementation in HPE Integrated Lights-Out 3 aka iLO3 firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack...

CVE-2016-4380: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-5926

Name of the Vulnerable Software and Affected Versions HPE Operations Manager versions 9.21.x through 9.21.129 Description A cross-site scripting XSS issue exists in the AdminUI of HPE Operations Manager, allowing remote authenticated users to inject arbitrary web script or HTML. This can be...

PT-2016-5927

Name of the Vulnerable Software and Affected Versions HPE XP7 Command View Advanced Edition CVAE Suite versions 6.x through 8.x before 8.4.1-02 Description The issue allows local users to bypass intended access restrictions. This occurs when Replication Manager RepMgr and Device Manager DevMgr ar...

HPE Converged Infrastructure Solution Sizer Suite (CISSS) Detection (Windows SMB Login)

Detects the installed version of HPE Converged Infrastructure Solution Sizer Suite. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HPE Insight Management Sizer Detection (Windows SMB Login)

Detects the installed version of HPE Insight Management Sizer. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

HPE Power Advisor Detection (Windows SMB Login)

Detects the installed version of HPE Power Advisor. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HPE Synergy Planning Tool Detection (Windows SMB Login)

Detects the installed version of HPE Synergy Planning Tool. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

HPE Power Advisor Remote Arbitrary Code Execution Vulnerability

HPE Power Advisor is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HPE Insight Management Sizer Remote Arbitrary Code Execution Vulnerability

HPE Insight Management Sizer is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HPE CISSS Remote Arbitrary Code Execution Vulnerability

HPE Converged Infrastructure Solution Sizer Suite CISSS is prone to a remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HPE Synergy Planning Tool Remote Arbitrary Code Execution Vulnerability

HPE Synergy Planning Tool is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HPE Storage Sizer Remote Arbitrary Code Execution Vulnerability

HPE Storage Sizer is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2016-5925

Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out 3 iLO3 versions prior to 1.88 Description The issue is related to the TLS implementation, which does not properly use a MAC protection mechanism in conjunction with CBC padding. This allows remote attackers to obtain...

CVE-2016-4378

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

Design/Logic Flaw

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

CVE-2016-4378

The CVE affects HP XP P9000 Command View Advanced Edition Software (before 8.4.1-00) and XP7 Command View Advanced Edition Suite (before 8.4.1-00). Vulnerable components include Device Manager, Tiered Storage Manager, Replication Manager, Replication Monitor, and Hitachi Automation Director (HAD)...

CVE-2016-4378

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

PT-2016-5924

Name of the Vulnerable Software and Affected Versions HPE XP P9000 Command View Advanced Edition Software versions prior to 8.4.1-00 HPE XP7 Command View Advanced Edition Suite versions prior to 8.4.1-00 Description The issue allows remote attackers to obtain sensitive information via unspecified...