HP Systems Insight Manager crossite scripting

No description provided...

[security bulletin] HPSBMA02525 SSRT100083 rev.1 - HP System Insight Manager Running on HP-UX, Linux, and Windows , Remote Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), Privilege Elevation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02027185 Version: 1 HPSBMA02525 SSRT100083 rev.1 - HP System Insight Manager Running on HP-UX, Linux, and Windows , Remote Cross Site Scripting XSS, Cross Site Request Forgery CSRF, Privilege...

HP System Insight Manager multiple security vulnerabilities

Crossite scripting, crossite request forgery, privilege escalation...

Cross site scripting

Cross-site scripting XSS vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1036

Cross-site scripting XSS vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1037

Cross-site request forgery CSRF vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Code injection

Unspecified vulnerability in HP System Insight Manager before 6.0 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2010-1038

Unspecified vulnerability in HP System Insight Manager before 6.0 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2010-1036

Cross-site scripting XSS vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1036

HP System Insight Manager (HP SIM) before 6.0 contains CVE-2010-1036, a remote XSS that lets an attacker inject arbitrary web script or HTML via unspecified vectors. The HP security bulletin HPSBMA02525 recommends upgrading to HP SIM 6.0 or later; CVSS v2 base score is cited as 6.8 (AV:N/AC:M/Au:...

CVE-2010-1038

Unspecified vulnerability in HP System Insight Manager before 6.0 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2010-1037

HP System Insight Manager (SIM) running on HP-UX, Linux, and Windows prior to version 6.0 is vulnerable to a CSRF flaw that could allow remote attackers to hijack user sessions. The vulnerability affects SIM components listed in the HP security bulletin (HPSBMA02525 rev.1) and is addressed by upg...

CVE-2010-1037

Cross-site request forgery CSRF vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-1038

CVE-2010-1038 affects HP System Insight Manager (HPSIM) before version 6.0. It describes an unspecified privilege-escalation vulnerability that could be exploited by remote authenticated users via unknown vectors. The HP security bulletin confirms the issue and recommends upgrading to HP System I...

CVE-2010-1037: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-1036: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1038: Undefined Security Weakness

Unspecified vulnerability in HP System Insight Manager before 6.0 allows remote authenticated users to gain privileges via unknown vectors...

Oracle Java SE and Java for Business 'MixerSequencer' Remote Code Execution Vulnerability

Description Oracle Java SE and Java for Business are prone to a remote code-execution vulnerability affecting the 'Sound' component. Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result...

HP System Management Homepage 3.0.2 - servercert Cross-Site Scripting

HP System Management Homepage 3.0.2 - servercert Cross-Site Scripting source: https://www.securityfocus.com/bid/37968/info HP System Management Homepage, also known as Systems Insight Manager, is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitra...