CVE-2011-1545

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-1544

Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2011-1545

HP Insight Control Performance Management for Windows is affected by CVE-2011-1545 (CSRF) prior to v6.3. The vulnerability could allow remote attackers to hijack authentication and perform actions with the user’s privileges. The HP security bulletin indicates upgrade to v6.3 or later as the mitig...

CVE-2011-1544

HP Insight Control Performance Management (Windows) before version 6.3 is affected by CVE-2011-1544 (remote authenticated privilege elevation) and CVE-2011-1545 (CSRF). The documented root cause is an unspecified vulnerability that could allow remote authenticated users to gain elevated privilege...

CVE-2011-1544

Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors...

HP Insight Control Performance Management security vulnerabilities

Crossite request forgery, privilege escalation...

CVE-2010-4031

Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Unspecified vulnerability in HP Insight Control Performance Management before 6.1 update 2 allows remote attackers to read arbitrary files via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

[security bulletin] HPSBMA02602 SSRT100317 rev.1 - HP Insight Control Performance Management for Windows, Remote Cross Site Scripting (XSS), Privilege Escalation, Cross Site Request Forgery (CSRF)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02563642 Version: 1 HPSBMA02602 SSRT100317 rev.1 - HP Insight Control Performance Management for Windows, Remote Cross Site Scripting XSS, Privilege Escalation, Cross Site Request Forgery CSRF...

[security bulletin] HPSBMA02600 SSRT100239 rev.1 - HP Insight Control Performance Management for Windows, Remote Arbitrary File Download

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02574359 Version: 1 HPSBMA02600 SSRT100239 rev.1 - HP Insight Control Performance Management for Windows, Remote Arbitrary File Download NOTICE: The information in this Security Bulletin should b...

CVE-2010-4030

HP Insight Control Performance Management for Windows is affected by CVE-2010-4030 (XSS). The vulnerability exists in versions prior to 6.2 and could allow remote injection of arbitrary script/HTML via unspecified vectors. HP’s security bulletin (HPSBMA02602 rev.1) confirms the issue and states t...

CVE-2010-4032

CVE-2010-4032 is a CSRF vulnerability in HP Insight Control Performance Management for Windows, pre-6.2, that could allow remote attackers to hijack user authentication via unknown vectors. The security bulletin indicates HP released v6.2 or later to resolve the issue; apply the update or equival...

CVE-2010-4100

HP Insight Control Performance Management for Windows (before 6.1 update 2) is affected by CVE-2010-4100. The vulnerability enables remote attackers to download/read arbitrary files via unknown vectors. HP’s security bulletin HP HPSBMA02600 (SSRT100239 rev.1) confirms the affected software and st...

CVE-2010-4031

Vulnerability CVE-2010-4031 affects HP Insight Control Performance Management for Windows (before 6.2). The issue allows remote authenticated users to gain privileges via unknown vectors due to an unspecified vulnerability in the affected software’s privilege handling. HP’s security bulletin conf...

Denial of Service (DoS) Vulnerability in JP1/PAM

Overview A Built-in database in JP1/Performance Analysis - Manager and JP1/Performance Management - Analysis Manager JP1/PAM contains a vulnerability that could cause a denial of service DoS condition due to the abnormal ending of the database process when receiving unexpected data. After the...

HP OpenView Network Node Manager getnnmdata.exe CGI Hostname buffer overflow

Added: 05/28/2010 CVE: CVE-2010-1555 BID: 40072 OSVDB: 64976 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability in Network Node Manager allows remote attackers to execute arbitrary commands by sending a...