CVE-2013-6192

HP Operations Orchestration is affected by CVE-2013-6192 through CSRF in versions earlier than 9, which could allow remote attackers to hijack user sessions via unknown vectors. The vulnerability is documented with a base CVSS-like impact as partial impact to confidentiality, integrity, and avail...

CVE-2013-6191

HP Operations Orchestration (OO) before version 9 is vulnerable to Cross-Site Scripting (XSS) via unspecified vectors, enabling potential manipulation of web content. The issue is documented as CVE-2013-6191 and is addressed by HP with patch v9.07.0004. The cited bulletin notes XSS/CSRF risks for...

CVE-2013-6192

Cross-site request forgery CSRF vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

HP Operations Orchestration code execution

No description provided...

[security bulletin] HPSBMU02813 SSRT100712 rev.1 - HP Operations Orchestration, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03490339 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03490339 Version: 1 HPSBMU02813...

CVE-2012-3258

Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors...

Code injection

Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2012-3258

CVE-2012-3258 affects HP Operations Orchestration version 9.0 prior to 9.03, enabling remote execution of arbitrary code via unknown vectors. The HP Security Bulletin SSRT100712 (HPSBMU02813) confirms remote code execution potential and lists patch 9.03 as the fix, with later patches (e.g., 9.05)...

CVE-2012-3258

Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors...

HP Operations Orchestration SQL injection

SQL injection in TCP/9001 RSScheduler service...

ZDI-12-172 : (0Day) HP Operations Orchestration RSScheduler Service JDBC Connector Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-172 : 0Day HP Operations Orchestration RSScheduler Service JDBC Connector Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-172 August 29, 2012 - -- CVE ID: - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - --...

(0Day) HP Operations Orchestration RSScheduler Service JDBC Connector Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Operations Orchestration. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RSScheduler service JDBC component of Operations Orchestra which liste...

CVE-2010-3985

Cross-site scripting XSS vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3985

HP Operations Orchestration (pre-9.0) contains an XSS vulnerability when used with Internet Explorer 6. The issue allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Base CVSSv2 score ~4.3 (Medium) with network access, no authentication, and partial integrity impac...

CVE-2010-3985

Cross-site scripting XSS vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...