CVE-2016-2007

HP Data Protector (HP) is affected by CVE-2016-2007 in versions prior to 7.03_108, 8.x prior to 8.15, and 9.x prior to 9.06. The vulnerability allows unauthenticated remote code execution via unspecified vectors, with ZDI-CAN-3354 tying the issue to the OmniInet.exe service listening on port 5555...

CVE-2016-2008

HP Data Protector is affected by CVE-2016-2008 in versions prior to 7.03 build 108, 8.x prior to 8.15, and 9.x prior to 9.06. The vulnerability is described as an unspecified flaw that allows remote attackers to execute arbitrary code (unauthenticated) or disclose information. The connected sourc...

CVE-2016-2004

HPE Data Protector before 7.03108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623...

CVE-2016-2004

CVE-2016-2004 affects HPE Data Protector: vulnerable in Content-Affected versions include HP Data Protector 7.03_108, 8.x prior to 8.15, and 9.x prior to 9.06. The flaw stems from lack of authentication in remote control communications, allowing unauthenticated remote code execution. This CVE is ...

CVE-2016-2004: Missing Authentication for Critical Function

HPE Data Protector before 7.03108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623...

PT-2016-1798

Name of the Vulnerable Software and Affected Versions HPE Data Protector versions prior to 7.03 108 HPE Data Protector versions 8.x prior to 8.15 HPE Data Protector versions 9.x prior to 9.06 Description The issue is related to errors in the code of HPE Data Protector, allowing remote attackers t...

PT-2016-4956

Name of the Vulnerable Software and Affected Versions HPE Data Protector versions prior to 7.03 108 HPE Data Protector versions 8.x prior to 8.15 HPE Data Protector versions 9.x prior to 9.06 Description The issue allows remote attackers to execute arbitrary code due to a lack of authentication...

PT-2016-1799

Name of the Vulnerable Software and Affected Versions HPE Data Protector versions prior to 7.03 108 HPE Data Protector versions 8.x prior to 8.15 HPE Data Protector versions 9.x prior to 9.06 Description The issue is related to errors in the code of HPE Data Protector, allowing remote attackers t...

CVE-2016-2005: Undefined Security Weakness

HPE Data Protector before 7.03108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352...

CVE-2016-2008: Undefined Security Weakness

HPE Data Protector before 7.03108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-2006: Undefined Security Weakness

HPE Data Protector before 7.03108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3353...

CVE-2016-2007: Undefined Security Weakness

HPE Data Protector before 7.03108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354...

PT-2016-4957

Name of the Vulnerable Software and Affected Versions HPE Data Protector versions prior to 7.03 108 HPE Data Protector versions 8.x prior to 8.15 HPE Data Protector versions 9.x prior to 9.06 Description The issue allows remote attackers to execute arbitrary code via unspecified vectors...

PT-2016-1800

Name of the Vulnerable Software and Affected Versions HPE Data Protector versions prior to 7.03 108 HPE Data Protector versions 8.x prior to 8.15 HPE Data Protector versions 9.x prior to 9.06 Description The issue is related to errors in the code of HPE Data Protector, allowing a remote attacker ...

CVE-2016-2003

HPE P9000 Command View Advanced Edition Software CVAE 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

CVE-2016-2002

The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417...

CVE-2016-2002

The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417...

Command injection

HPE P9000 Command View Advanced Edition Software CVAE 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

CVE-2016-2002

The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417...

CVE-2016-2002

CVE-2016-2002 affects Hewlett Packard Enterprise Vertica, specifically the Analytics Management Console’s validateAdminConfig handler. Affected releases include Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1. The vulnerability arises from insufficient input validat...