7819 matches found
Design/Logic Flaw
HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
CVE-2016-1985
CVE-2016-1985 affects HPE Operations Manager 8.x and 9.0 on Windows. The vulnerability is due to unsafe deserialization of crafted Java objects via Apache Commons Collections, enabling remote code execution when processing a crafted serialized payload (e.g., via SOAP). The CVSS metrics in the pro...
CVE-2016-1985
HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
PT-2016-4943
Name of the Vulnerable Software and Affected Versions HPE Operations Manager versions 8.x through 9.0 Description The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. Recommendations For HPE...
CVE-2016-1985: Improper Control of Generation of Code
HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
CVE-2015-6864
HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
Design/Logic Flaw
HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
Design/Logic Flaw
HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
CVE-2015-6863
HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
CVE-2015-6863
HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
CVE-2015-6864
HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
CVE-2015-6864
HP ArcSight Logger prior to version 6.1P1 is affected by multiple vulnerabilities in the Intellicus and client-certificate upload components, due to improper input validation, enabling remote authenticated execution of arbitrary code. Remediation per the connected Nessus entry is upgrade to 6.1P1...
CVE-2015-6863
HP ArcSight Logger before 6.1P1 is affected by multiple vulnerabilities in the Intellicus and client-certificate upload components due to improper validation of user-supplied input. This allows a remote attacker to execute arbitrary code. The issues are reported in the context of HP ArcSight Logg...
CVE-2015-6863: Improper Input Validation
HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
PT-2016-3729
Name of the Vulnerable Software and Affected Versions HPE ArcSight Logger versions prior to 6.1P1 Description The issue allows remote authenticated users to execute arbitrary code via unspecified input to the Intellicus or client-certificate upload component. Recommendations For versions prior to...
PT-2016-3728
Name of the Vulnerable Software and Affected Versions HPE ArcSight Logger versions prior to 6.1P1 Description The issue allows remote attackers to execute arbitrary code via unspecified input to the Intellicus or client-certificate upload component. Recommendations For versions prior to 6.1P1,...
CVE-2015-6864: Improper Input Validation
HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...
CVE-2015-6862
HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors...