CVE-2014-2644

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2014-2644

HP Systems Insight Manager (SIM) prior to version 7.4 on Linux/Windows is affected by CVE-2014-2644: a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary scripts/HTML via unknown vectors. The CVSS v2 base score is 4.3 (I: Partial; AV:N/AC:M/Au:N). Remediation: ...

CVE-2014-2644: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

PT-2014-4848

Name of the Vulnerable Software and Affected Versions HP Systems Insight Manager SIM versions prior to 7.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For HP Systems Insight Manager SIM versions prior to 7.4, update ...

CVE-2014-2643

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2014-2645

HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...

Code injection

HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...

CVE-2014-2643

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2014-2645

HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...

CVE-2014-2643

HP Systems Insight Manager (SIM) before version 7.4 is affected by CVE-2014-2643, an unspecified vulnerability that allows remote authenticated privilege elevation. The issue is documented in HP’s security bulletin HPSBMU03118 rev.1 and is referenced in multiple feeds (NVD entry CVE-2014-2643, Ne...

HP Systems Insight Manager multiple security vulnerability

Privilege escalation, crossite scripting, clickjacking...

[security bulletin] HPSBMU03118 rev.1 - HP Systems Insight Manager (SIM) on Linux and Windows, Multiple Remote Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04468121 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04468121 Version: 1 HPSBMU03118 rev....

CVE-2014-2645: Improper Input Validation

HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...

CVE-2014-2643: Undefined Security Weakness

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote authenticated users to gain privileges via unknown vectors...

PT-2014-4847

Name of the Vulnerable Software and Affected Versions HP Systems Insight Manager SIM versions prior to 7.4 Description The issue allows remote authenticated users to gain privileges via unknown vectors. Recommendations For HP Systems Insight Manager SIM versions prior to 7.4, update to version 7....

PT-2014-4849

Name of the Vulnerable Software and Affected Versions HP Systems Insight Manager SIM versions prior to 7.4 Description The issue allows remote attackers to conduct clickjacking attacks. Recommendations For versions prior to 7.4, update to version 7.4 or later to resolve the issue...

HP Systems Insight Manager 7.2.x < 7.2 Hotfix 37 / 7.3.x < 7.3 Hotfix 34 OpenSSL Multiple Vulnerabilities

The version of HP Systems Insight Manager installed on the remote Windows host is affected by the following vulnerabilities in the included OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service...

HP Compaq Insight Manager Web Interface Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5780/info It has been reported that the Compaq Insight Manager web interface is prone to cross-site scripting attacks. It is possible to construct a malicious link to a Compaq Insight Manager web interface that includes...

Compaq Client Management Agents 3.70/4.0,Insight Management Agents 4.21 A/4.22 A/4.30 A,Intelligent Cluster Administrator 1.0,Management Agents for Workstations 4.20 A,Server Management Agents <= 4.23,Survey Utility 2.0 Web File Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/282/info A vulnerability in the Compaq Management Agents and the Compaq Survey Utility when running as an agent allows remote malicious users to steal local files. All Compaq Server and Client Management Agents version 4....

[security bulletin] HPSBMU03033 rev.1 - HP Insight Control Software Components running OpenSSL, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04272892 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04272892 Version: 1 HPSBMU03033 rev....