CVE-2017-14363

CVE-2017-14363 concerns a Cross-Site Scripting (XSS) vulnerability impacting Micro Focus Operations Manager i, specifically versions 10.60, 10.61, and 10.62 . The connected documents confirm the affected product and versions and describe that the vulnerability could be remotely exploited to injec...

PT-2017-13421

Name of the Vulnerable Software and Affected Versions Micro Focus Operations Manager i versions 10.60 through 10.62 Description A Cross-Site Scripting XSS issue has been identified, which could be remotely exploited to allow Cross-Site Scripting XSS. Recommendations For versions 10.60 through...

CVE-2017-14363: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability has been identified in Micro Focus Operations Manager i, versions 10.60, 10.61, 10.62. The vulnerability could be remotely exploited to allow Cross-Site Scripting XSS...

HP Operations Manager i Apache Flex BlazeDS External Entity Injection Vulnerability

The remote HP Operations Manager i host is affected by an XML external entity XXE vulnerability in the bundled version of Apache Flex BlazeDS due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. A remote attacker can exploit this, via a specially...

HP Operations Manager i Privilege Escalation

The vulnerability of the execve system call implementation in HP Operations Manager is related to errors in the code. Exploiting this vulnerability could allow a malicious individual to increase their privileges locally...

CVE-2015-2137

Unspecified vulnerability in HP Operations Manager i OMi 9.22, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to execute arbitrary code via unknown vectors...

Code injection

Unspecified vulnerability in HP Operations Manager i OMi 9.22, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2015-2137

HP Operations Manager i (OMi) versions 9.22–10.01 are affected by an unspecified remote code execution vulnerability (CVE-2015-2137). The issue allows remote code execution via unknown vectors and is rated high/severe (CVSSv2 base 9.3, impact C/I/A). HP’s Security Bulletin HPSBGN03393 rev.1 notes...

PT-2015-1941

Name of the Vulnerable Software and Affected Versions HP Operations Manager i versions 9.22 through 10.01 Description The issue is related to errors in the code of the HP Operations Manager i system. It allows a remote attacker to execute arbitrary code. Recommendations For versions 9.22 through...

CVE-2015-2137: Undefined Security Weakness

Unspecified vulnerability in HP Operations Manager i OMi 9.22, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to execute arbitrary code via unknown vectors...

Unspecified Arbitrary Code Execution Vulnerability in HP Operations Manager i

HP Operations is a decentralized client/service software product for managing decentralized environments. An unspecified security vulnerability exists in HP Operations Manager i, which could be exploited by remote attackers to submit a special request to execute arbitrary code...

CVE-2015-2107: Improper Access Control

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...

PT-2015-5612

Name of the Vulnerable Software and Affected Versions HP Operations Manager i Management Pack versions 1.x before 1.01 for SAP Description The issue allows local users to execute OS commands by leveraging SAP administrative privileges. Recommendations For HP Operations Manager i Management Pack...

PT-2014-4811

Name of the Vulnerable Software and Affected Versions HP Operations Manager i versions 9.1 through 9.13 HP Operations Manager i versions 9.2 through 9.24 Description The issue allows remote authenticated users to execute arbitrary code by leveraging the OMi operator role. Recommendations For...

CVE-2014-2607: Undefined Security Weakness

Unspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows remote authenticated users to execute arbitrary code by leveraging the OMi operator role...