2680 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors...
CVE-2014-6623
CVE-2014-6623 affects Aruba Networks ClearPass Insight module and is a CSRF vulnerability reported to affect versions older than 6.3.6 and 6.4.x older than 6.4.1. The vulnerability allows remote attackers to hijack the authentication of a logged-in user via unspecified vectors. The connected docu...
CVE-2014-6623: Improper Neutralization of Input During Web Page Generation
Cross-site request forgery CSRF vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors...
PT-2014-7307
Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description A cross-site request forgery CSRF issue in the Insight module allows remote attackers to hijack the authentication of a logged-...
HP Systems Insight Manager < 7.4 Multiple Vulnerabilities
The version of HP Systems Insight Manager installed on the remote Windows host is affected by the following vulnerabilities : - An unspecified vulnerability exists that allows a remote authenticated attacker to gain limited elevated privileges. CVE-2014-2643 - A vulnerability exists that allows...
CVE-2014-2644
Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2014-2644
Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2014-2644
HP Systems Insight Manager (SIM) prior to version 7.4 on Linux/Windows is affected by CVE-2014-2644: a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary scripts/HTML via unknown vectors. The CVSS v2 base score is 4.3 (I: Partial; AV:N/AC:M/Au:N). Remediation: ...
CVE-2014-2644: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
PT-2014-4848
Name of the Vulnerable Software and Affected Versions HP Systems Insight Manager SIM versions prior to 7.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For HP Systems Insight Manager SIM versions prior to 7.4, update ...
CVE-2014-2645
HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...
CVE-2014-2643
Unspecified vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote authenticated users to gain privileges via unknown vectors...
Code injection
HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...
CVE-2014-2643
Unspecified vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote authenticated users to gain privileges via unknown vectors...
CVE-2014-2645
HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...
CVE-2014-2643
HP Systems Insight Manager (SIM) before version 7.4 is affected by CVE-2014-2643, an unspecified vulnerability that allows remote authenticated privilege elevation. The issue is documented in HP’s security bulletin HPSBMU03118 rev.1 and is referenced in multiple feeds (NVD entry CVE-2014-2643, Ne...
PT-2014-4849
Name of the Vulnerable Software and Affected Versions HP Systems Insight Manager SIM versions prior to 7.4 Description The issue allows remote attackers to conduct clickjacking attacks. Recommendations For versions prior to 7.4, update to version 7.4 or later to resolve the issue...
PT-2014-4847
Name of the Vulnerable Software and Affected Versions HP Systems Insight Manager SIM versions prior to 7.4 Description The issue allows remote authenticated users to gain privileges via unknown vectors. Recommendations For HP Systems Insight Manager SIM versions prior to 7.4, update to version 7....
