CVE-2016-2014

CVE-2016-2014 affects HPE Network Node Manager i (NNMi) versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01. The vulnerability allows remote authenticated users to modify data or cause a denial of service via unspecified vectors. The provided connected sources confirm the affected product and the i...

CVE-2016-2010

Summary: CVE-2016-2010 is a cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi). The issue affects NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 and could allow a remote authenticated user to inject arbitrary web script or HTML via unspecified vectors. The conne...

CVE-2016-2011

CVE-2016-2011 is a Cross-Site Scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) affecting NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The provided documents do ...

CVE-2016-2010

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2011...

CVE-2016-2009

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

CVE-2016-2011

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010...

CVE-2016-2009

CVE-2016-2009 affects HPE Network Node Manager i (NNMi) versions 9.20, 9.23, 9.24, 9.25, 10.00 and 10.01, where remote authenticated users can execute arbitrary commands via a crafted serialized Java object tied to the Apache Commons Collections (ACC) library. The root cause is not explicitly bro...

CVE-2016-2014

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

PT-2016-4959

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20 through 10.01 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HPE Network Node...

PT-2016-4962

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 Description The issue allows remote authenticated users to obtain sensitive information. Recommendations For versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01, a...

PT-2016-4961

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.01 Description The issue allows remote attackers to bypass authentication via unspecified vectors. Recommendations For versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.01, at...

CVE-2016-2010: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2011...

CVE-2016-2014: Improper Access Control

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

CVE-2016-2013: Exposure of Sensitive Information to an Unauthorized Actor

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2016-2011: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010...

PT-2016-4958

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20 through 9.25, 10.00, 10.01 Description The issue allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC...

CVE-2016-2012: Improper Authentication

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to bypass authentication via unspecified vectors...

PT-2016-4963

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.01 Description The issue allows remote authenticated users to modify data or cause a denial of service. Recommendations For versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.0...

CVE-2016-2009: Improper Access Control

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

PT-2016-4960

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20 through 10.01 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HPE Network Node...