CVE-2016-8511: Deserialization of Untrusted Data

A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found...

CVE-2017-5810: Improper Neutralization of Special Elements used in an SQL Command

A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

HPE Network Automation FileServlet Information Disclosure (CVE-2017-5811)

An information disclosure vulnerability exists in HPE Network Automation. The vulnerability is due to a lack of sanitization on a user supplied path on requests handled by FileServlet. A remote attacker could exploit this vulnerability by sending a maliciously crafted request to the target server...

HPE Network Automation RedirectServlet SQL Injection (CVE-2017-5810)

A SQL injection vulnerability exists in HPE Network Automation. The vulnerability is due to insufficient sanitization of certain HTTP request parameters in RedirectServlet. A remote attacker could exploit this vulnerability by sending a maliciously crafted request to the target server...

HPE Network Automation PermissionFilter Authentication Bypass (CVE-2017-5812)

An authentication bypass vulnerability has been reported in HPE Network Automation. The vulnerability is due to errors in handling specific strings contained in the request URI. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...

HP Network Automation Remote Unauthenticated Access Vulnerability

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. A security vulnerability exist...

HP Network Automation 9.x, 10.x < 10.00.022 / 10.1x.x < 10.11.03 / 10.20.x < 10.21.01 Multiple Vulnerabilities

The HP Network Automation application running on the remote host is version 9.1x, 9.2x, or 10.00.x prior to 10.00.022; 10.10.x or 10.11.x prior to 10.11.03; or 10.20.x prior to 10.21.01. It is, therefore, affected by multiple vulnerabilities : - A SQL injection vulnerability exists in the...

HP Network Automation Information Disclosure Vulnerability

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. An information disclosure...

HP Network Automation Authentication Bypass Vulnerability

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. An authentication bypass...

PT-2017-16693

Name of the Vulnerable Software and Affected Versions HPE Network Automation versions 9.1x through 10.2x Description A remote code execution vulnerability was found in HPE Network Automation. The issue allows for directory traversal and information disclosure through the TrueControl Management...

PT-2017-16694

Name of the Vulnerable Software and Affected Versions HPE Network Automation versions 9.1x through 10.2x Description A remote SQL information disclosure vulnerability was found, which may allow unauthorized access to sensitive data. Additionally, an authentication bypass vulnerability in the...

PT-2017-16692

Name of the Vulnerable Software and Affected Versions HPE Network Automation versions 9.1x through 10.2x Description A remote SQL injection issue was discovered, potentially allowing for remote code execution. Recommendations For versions 9.1x through 10.2x, at the moment, there is no information...

Hewlett Packard Enterprise Network Automation PermissionFilter Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Hewlett Packard Enterprise Network Automation. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PermissionFilter class. This class contains a method...

Hewlett Packard Enterprise Network Automation RedirectServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Network Automation. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RedirectServlet component. The issue results from th...

Hewlett Packard Enterprise Network Automation TrueControl Management Engine Service FileServlet Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Hewlett Packard Enterprise Network Automation. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FileServlet servlet. The issue results from...

HP Network Automation Remote Code Execution Vulnerability (CNVD-2017-07620)

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. A remote code execution...

HP Network Automation SQL Injection Vulnerability (CNVD-2017-07619)

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. An SQL injection vulnerability...

PT-2017-3552

Name of the Vulnerable Software and Affected Versions: HPE Network Automation versions 9.1x through 10.2x Description: The issue is related to insufficient protection of the SQL query structure in HPE Network Automation, allowing a remote SQL injection authentication bypass. This can enable a...

HPESBGN03740 rev.1 - HPE Network Automation, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Authentication Bypass; Remote: Code Execution, Elevated Privileges, SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Network Automation Software 9.1x, 9.2x, 10.0x, 10.1x and 10.2x CVSS Scores: | CVE | CVSS Vector | Base Score | | -...

CVE-2016-6484

CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/login.tdf...