CVE-2024-51768

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51769

An information disclosure vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51770

An information disclosure vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51768

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51767

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51767

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51770

An information disclosure vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51770

An information disclosure vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51770

HPE AutoPass License Server (APLS) before 9.17 is affected by an XML External Entity (XXE) information disclosure vulnerability. The flaw exists in the web service that listens on TCP port 5814 and can be exploited remotely without authentication to disclose sensitive information. Exploitation de...

CVE-2024-51769

CVE-2024-51769 describes an information-disclosure vulnerability in Hewlett Packard Enterprise AutoPass License Server (APLS) prior to version 9.17. The root cause, per the ZDI advisory, is a lack of proper validation of a user-supplied string used to construct SQL queries within the web service ...

CVE-2024-51769

An information disclosure vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51768

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51768

The CVE-2024-51768 entry concerns Hewlett Packard Enterprise AutoPass License Server (APLS) prior to 9.17, where the hsqldb component is the root cause. Public advisories describe an RCE via the hsqldb service, which listens on TCP port 9001; an attacker with network access can potentially execut...

CVE-2024-51768

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51768

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51767

Hewlett Packard Enterprise AutoPass License Server (APLS) before version 9.17 contains an authentication bypass in the web service listening on port 5814. The flaw arises from an authorization decision based on a non-canonical URL, enabling remote network attackers to bypass authentication withou...

CVE-2024-51767

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51767

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

HPE AutoPass License Server 安全漏洞

HPE AutoPass License Server is a license management system from HPE America. A security vulnerability exists in HPE AutoPass License Server versions prior to 9.17, which stems from an hsqldb-related vulnerability that could lead to remote code execution...

HPE AutoPass License Server 安全漏洞

HPE AutoPass License Server is a license management system from HPE America. A security vulnerability exists in HPE AutoPass License Server versions prior to 9.17 that stems from an authentication bypass...