Cross site scripting

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2014-2644

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2014-2644

HP Systems Insight Manager (SIM) prior to version 7.4 on Linux/Windows is affected by CVE-2014-2644: a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary scripts/HTML via unknown vectors. The CVSS v2 base score is 4.3 (I: Partial; AV:N/AC:M/Au:N). Remediation: ...

CVE-2014-2645

HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...

CVE-2014-2643

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote authenticated users to gain privileges via unknown vectors...

Code injection

HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...

CVE-2014-2643

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2014-2645

HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...

CVE-2014-2643

HP Systems Insight Manager (SIM) before version 7.4 is affected by CVE-2014-2643, an unspecified vulnerability that allows remote authenticated privilege elevation. The issue is documented in HP’s security bulletin HPSBMU03118 rev.1 and is referenced in multiple feeds (NVD entry CVE-2014-2643, Ne...

HP Systems Insight Manager multiple security vulnerability

Privilege escalation, crossite scripting, clickjacking...

[security bulletin] HPSBMU03118 rev.1 - HP Systems Insight Manager (SIM) on Linux and Windows, Multiple Remote Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04468121 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04468121 Version: 1 HPSBMU03118 rev....

Important: Red Hat Security Advisory: Fuse ESB Enterprise/Fuse MQ Enterprise 7.1.0 update

This advisory contains instructions on how to resolve one security issue in the Elasticsearch component in Fuse ESB Enterprise and Fuse MQ Enterprise 7.1.0. Red Hat Product Security has rated this security issue as having Important security impact. A Common Vulnerability Scoring System CVSS base...

HP Systems Insight Manager 7.2.x < 7.2 Hotfix 37 / 7.3.x < 7.3 Hotfix 34 OpenSSL Multiple Vulnerabilities

The version of HP Systems Insight Manager installed on the remote Windows host is affected by the following vulnerabilities in the included OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other sessions or allow denial of service...

HP Insight Control Server Migration Detection (Windows)

Binary data hpinsightcontrolservermigrationinstalled.nbin...

HP Insight Control Server Migration 7.3.0 and 7.3.1 OpenSSL Heartbeat Information Disclosure (Heartbleed)

According to its version, the HP Insight Control Server Migration install on the remote Windows host includes a bundled copy of OpenSSL that is affected by an information disclosure vulnerability. A remote attacker could read the contents of up to 64KB of server memory, potentially exposing...

Symantec Data Insight Detection

Binary data symantecdatainsightinstalled.nbin...

Symantec Data Insight Management Console Detection

Binary data symantecdatainsightdetect.nbin...

Symantec Data Insight < 4.5 Multiple Vulnerabilities (SYM14-012)

The remote host is running a version of Symantec Data Insight prior to 4.5. It is, therefore, affected by multiple vulnerabilities : - The management console for Symantec Data Insight is affected by a cross-site scripting vulnerability due to a failure to sanitize user-supplied input. CVE-2014-34...

HP Compaq Insight Manager Web Interface Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5780/info It has been reported that the Compaq Insight Manager web interface is prone to cross-site scripting attacks. It is possible to construct a malicious link to a Compaq Insight Manager web interface that includes...

HP OpenView Performance Insight Server Backdoor Account Code Execution

No description provided by source. $Id: hpopenviewinsightbackdoor.rb 11969 2011-03-15 21:56:11Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...