CVE-2017-13982

HPE BSM Platform Application Performance Management System Health suffers a directory traversal/unrestricted file upload flaw in versions 9.26, 9.30, and 9.40. The root cause involves the UploadManager servlet failing to validate user-supplied paths, enabling an attacker to upload arbitrary files...

HPE Application Performance Management Platform Remote Code Execution Vulnerability

HPE Application Performance Management BSM Platform is a set of application performance management system of the American Hewlett Packard Enterprise HPE company's BSM platform. A security vulnerability exists in HPE BSM Platform versions 9.26, 9.30, and 9.40. A remote attacker could exploit the...

Hewlett Packard Enterprise Application Performance Management Staging Data Replicator hpbsmsdr Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Application Performance Management Staging Data Replicator. The specific flaw exists within the hpbsmsdr web service, which listens on TCP port 29921 by default. The...

HPE BSM Platform Application Performance Management System Health Path Traversal Vulnerability

HPE BSM Platform Application Performance Management System Health is a suite of application performance management systems for the BSM platform from Hewlett Packard Enterprise HPE. A path traversal vulnerability exists in HPE BSM Platform Application Performance Management System Health versions...

HPE BSM Platform Application Performance Management System Health Path Traversal Vulnerability (CNVD-2017-33007)

HPE BSM Platform Application Performance Management System Health is a suite of application performance management systems for the BSM platform from Hewlett Packard Enterprise HPE. A path traversal vulnerability exists in HPE BSM Platform Application Performance Management System Health versions...

HPE BSM Platform Application Performance Management System Health Arbitrary File Deletion Vulnerability

HPE BSM Platform Application Performance Management System Health is a suite of application performance management systems for the BSM platform from Hewlett Packard Enterprise HPE. A security vulnerability exists in HPE BSM Platform Application Performance Management System Health versions 9.26,...

Hewlett Packard Enterprise Application Performance Management System Health SHExportToExcel Servlet Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Hewlett Packard Enterprise Application Performance Management System Health. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed...

Hewlett Packard Enterprise Application Performance Management System Health UploadManager Servlet Directory Traversal Unrestricted File Upload Vulnerability

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of Hewlett Packard Enterprise Application Performance Management System Health. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed...

Hewlett Packard Enterprise Application Performance Management System Health Email Servlet Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Hewlett Packard Enterprise Application Performance Management System Health. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be...

Hewlett Packard Enterprise Application Performance Management System Health Authentication Bypass Vulnerability

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Hewlett Packard Enterprise Application Performance Management System Health. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the Syst...

Unspecified Vulnerability in Oracle Hyperion Hyperion Enterprise Performance Management Architect Component (CNVD-2015-04865)

Oracle Hyperion is a performance management and financial management solution. A security vulnerability exists in the Oracle Hyperion Hyperion Enterprise Performance Management Architect component that can be exploited by remote attackers to compromise system integrity...

Security feature bypass

Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-2584...

CVE-2015-2584

Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2015-2592...

[SECURITY] Fedora 20 Update: e2fsprogs-1.42.12-2.fc20

The e2fsprogs package contains a number of utilities for creating, checking, modifying, and correcting any inconsistencies in second, third and fourth extended ext2/ext3/ext4 filesystems. E2fsprogs contains e2fsck used to repair filesystem inconsistencies after an unclean shutdown, mke2fs used to...

Design/Logic Flaw

Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to End User Experience Management...

CVE-2014-4203

Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Property Editing...

Design/Logic Flaw

Unspecified vulnerability in the Hyperion Enterprise Performance Management Architect component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows local users to affect integrity and availability via unknown vectors related to Data Synchronizer...

CVE-2014-4188

Cross-site request forgery CSRF vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-4189

Cross-site scripting XSS vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.x before 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...