CVE-2012-4937: Undefined Security Weakness

Session fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack web sessions via a jsessionid cookie...

CVE-2012-4938: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web interface in Pattern Insight 2.3 allows remote authenticated administrators to inject arbitrary web script or HTML via the banner message...

CVE-2012-4950: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly handled during construction of error messages...

PT-2012-5671

Name of the Vulnerable Software and Affected Versions Pattern Insight version 2.3 Description The issue allows remote attackers to hijack web sessions. This is achieved via a jsession id cookie in the web interface. Recommendations For Pattern Insight version 2.3, update to a version that fixes...

PT-2012-5672

Name of the Vulnerable Software and Affected Versions Pattern Insight version 2.3 Description A cross-site scripting XSS issue exists in the web interface, allowing remote authenticated administrators to inject arbitrary web script or HTML via the banner message. This could potentially lead to...

PT-2012-5669

Name of the Vulnerable Software and Affected Versions Pattern Insight version 2.3 Description A cross-site request forgery CSRF issue in the web interface allows remote attackers to hijack the authentication of arbitrary users. Recommendations For version 2.3, update to a version that includes a...

PT-2012-5684

Name of the Vulnerable Software and Affected Versions Pattern Insight version 2.3 Description A cross-site scripting XSS issue exists in the Keyword Search page of the web interface, allowing remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly...

PT-2012-5670

Name of the Vulnerable Software and Affected Versions Pattern Insight version 2.3 Description The issue allows remote attackers to conduct clickjacking attacks via a FRAME element in the web interface. Recommendations For Pattern Insight version 2.3, consider disabling the web interface or...

CVE-2012-3269

Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-3270...

CVE-2012-3270

Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-3269...

Design/Logic Flaw

Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-3269...

Design/Logic Flaw

Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-3270...

CVE-2012-3269

Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-3270...

CVE-2012-3270

Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-3269...

CVE-2012-3269

HP Performance Insight v5.31, v5.40 and v5.41 when configured with Sybase as the database contains a vulnerability enabling remote attackers to obtain sensitive information, modify data, or cause a denial of service. The issue is documented in HP’s security bulletin HPSBMU02827 (SSRT100924 rev.1)...

CVE-2012-3270

CVE-2012-3270 affects HP Performance Insight (PI) versions 5.31, 5.40 and 5.41 when running with Sybase as the database. The vulnerability enables remote attackers to cause a denial of service and potential data loss/intrusion due to flaws in the PI-Sybase interaction (root cause described in the...

CVE-2012-3269: Undefined Security Weakness

Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-3270...

CVE-2012-3270: Undefined Security Weakness

Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-3269...

PT-2012-4614

Name of the Vulnerable Software and Affected Versions HP Performance Insight versions 5.31 through 5.41 Description The issue allows remote attackers to obtain sensitive information, modify data, or cause a denial of service. The attackers can exploit this via unknown vectors when Sybase is used...

PT-2012-4615

Name of the Vulnerable Software and Affected Versions HP Performance Insight versions 5.31 through 5.41 Description The issue allows remote attackers to obtain sensitive information, modify data, or cause a denial of service. The attackers can exploit this via unknown vectors when Sybase is used...