CVE-2017-5810

A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2017-5811

CVE-2017-5811 affects HP (HPE) Network Automation 9.1x, 9.2x, 10.0x, 10.1x and 10.2x. The vulnerability is a FileServlet directory traversal information disclosure caused by lack of validation of a user-supplied path, allowing remote attackers to read arbitrary files. The linked sources in the co...

CVE-2017-5810

CVE-2017-5810 is a remote SQL injection in HP Network Automation, affecting 9.1x, 9.2x, 10.0x, 10.1x and 10.2x. The issue arises in the RedirectServlet due to insufficient sanitization of certain HTTP request parameters, enabling an unauthenticated or remote attacker to inject SQL and potentially...

CVE-2017-5812

CVE-2017-5812 affects Hewlett Packard Enterprise HP Network Automation (HP Network Automation). The connected sources describe an authentication bypass in the PermissionFilter class, enabling a remote attacker to bypass authentication and reach a vulnerable servlet. Affected product versions incl...

CVE-2017-5814

CVE-2017-5814 is a remote SQL injection authentication bypass affecting HPE Network Automation versions 9.1x, 9.2x, 10.0x, 10.1x and 10.2x. The vulnerability stems from a SQL injection flaw used to bypass authentication, enabling an attacker to potentially access the application and back-end data...

CVE-2017-5813

CVE-2017-5813 affects HPE Network Automation, versions 9.1x, 9.2x, 10.0x, 10.1x and 10.2x. The connected documents consistently describe a remote unauthenticated access vulnerability, i.e., a flaw that could allow an attacker to gain access without authentication. The NVD entry lists public metri...

CVE-2017-5812

A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2017-5814

A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2017-5811

A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2016-8511

CVE-2016-8511 is a remote code execution in HP Network Automation via RPCServlet Java deserialization. The flaw allows sending crafted serialized data to RPCServlet to execute arbitrary code. Affected versions include HP Network Automation 9.1x, 9.2x, and 10.00.x before 10.00.021; 10.10.x before ...

CVE-2016-8511

A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found...

CVE-2017-5813

A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2017-5814: Improper Neutralization of Special Elements used in an SQL Command

A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2017-5812: Improper Neutralization of Special Elements used in an SQL Command

A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2016-8511: Deserialization of Untrusted Data

A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found...

CVE-2017-5811: Exposure of Sensitive Information to an Unauthorized Actor

A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2017-5813: Undefined Security Weakness

A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2017-5810: Improper Neutralization of Special Elements used in an SQL Command

A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

HPE Network Automation FileServlet Information Disclosure (CVE-2017-5811)

An information disclosure vulnerability exists in HPE Network Automation. The vulnerability is due to a lack of sanitization on a user supplied path on requests handled by FileServlet. A remote attacker could exploit this vulnerability by sending a maliciously crafted request to the target server...

HPE Network Automation RedirectServlet SQL Injection (CVE-2017-5810)

A SQL injection vulnerability exists in HPE Network Automation. The vulnerability is due to insufficient sanitization of certain HTTP request parameters in RedirectServlet. A remote attacker could exploit this vulnerability by sending a maliciously crafted request to the target server...