HP Service Manager多个安全漏洞

CVE ID:CVE-2013-1493、CVE-2013-2067、CVE-2013-6202 HP Service Manager是一款软件即服务可以帮助您迅速部署一个全面的IT 服务管理解决方案。 HP Service Manager存在多个安全漏洞： 1，不正确过滤返回给用户的输入，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 2，应用程序存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 3，存在未明错误，允许攻击者利用漏洞执行任意代码，目前没有详细漏洞细节提供。...

CVE-2013-6202

Multiple cross-site request forgery CSRF vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that 1 insert XSS sequences or 2 execute arbitrary code...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that 1 insert XSS sequences or 2 execute arbitrary code...

CVE-2013-6202

HP Service Manager CVE-2013-6202 affects versions 9.30–9.33 and involves CSRF that can hijack an authenticated user, with the HP bulletin noting XSS, DoS, and remote arbitrary code execution. The HP Security Bulletin HPSBMU02964 rev.1 confirms affected versions and provides remediation: updates t...

CVE-2013-6202

Multiple cross-site request forgery CSRF vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that 1 insert XSS sequences or 2 execute arbitrary code...

HP Service Manager security vulnerabilities

Crossite scripting, code execution...

[security bulletin] HPSBMU02959 rev.1 - HP Service Manager WebTier and Windows Client, Cross-Site Scripting (XSS), Execution of Arbitrary Code and other Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04052075 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04052075 Version: 1 HPSBMU02959 rev....

HP Service Manager WebTier and Windows Client未明跨站脚本漏洞

CVE ID:CVE-2013-6198 HP Service Manager是一款软件即服务可以帮助您迅速部署一个全面的IT 服务管理解决方案。 HP Service Manager WebTier and Windows Client存在未明跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 HP Service Manager WebTier and Windows Client 9.20 HP Service Manager WebTier and Windows Client 9.21 厂商补丁： HP ---...

HP Service Manager WebTier and Windows Client未明代码执行漏洞

CVE ID:CVE-2013-6197 HP Service Manager是一款软件即服务可以帮助您迅速部署一个全面的IT 服务管理解决方案。 HP Service Manager WebTier and Windows Client存在未明安全漏洞，允许通过验证的远程用户执行任意代码。 0 HP Service Manager WebTier and Windows Client 9.20 HP Service Manager WebTier and Windows Client 9.21 厂商补丁： HP ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

CVE-2013-6197

Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2013-6198

Cross-site scripting XSS vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6198

HP Service Manager WebTier and Windows Client 9.20 and 9.21 are affected by CVE-2013-6198, a cross-site scripting (XSS) vulnerability with unspecified vectors that could allow remote injection of malicious script or HTML in the context of a logged-in user. Impact is partial integrity compromise t...

CVE-2013-6197

HP Service Manager WebTier and Windows Client versions 9.20 and 9.21 are affected by CVE-2013-6197 (before 9.21.661 p8), enabling remote authenticated users to execute arbitrary code via unknown vectors. The HP advisory HPSBMU02959 rev.1 and related HP security bulletin summarize the vulnerabilit...

CVE-2013-6198

Cross-site scripting XSS vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6197

Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors...

HP Service Manager / HP ServiceCenter multiple security vulnerabilities

Code execution, privilege escalation, information leakage, XSS...

[security bulletin] HPSBGN02942 rev.1 - HP Service Manager and ServiceCenter, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04026812 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04026812 Version: 1 HPSBGN02942 rev....

CVE-2013-4844

Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execute arbitrary code via unknown vectors...