Design/Logic Flaw

Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-4844

Unspecified vulnerability in HP Service Manager 7.11, 9.21, 9.30, 9.31, and 9.32, and ServiceCenter 6.2.8, allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-4844

HP Service Manager (versions 7.11, 9.21, 9.30, 9.31, 9.32) and HP ServiceCenter 6.2.8 are affected by a remote code execution vulnerability (CVE-2013-4844). The HP security bulletin HPSBGN02942 rev.1 indicates the issue could be exploited remotely to execute arbitrary code via unknown vectors, wi...

[security bulletin] HPSBMU02931 rev.2 - HP Service Manager, Injection of Arbitrary Code, Remote Privilege Elevation, Remote Disclosure of Privileged Information and Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03960916 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03960916 Version: 2 HPSBMU02931 rev....

CVE-2013-4831

HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2013-4833

Cross-site scripting XSS vulnerability in HP Service Manager 9.30 through 9.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4832

HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2013-4830

HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" approach...

Design/Logic Flaw

HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Service Manager 9.30 through 9.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified vectors...

Code injection

HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" approach...

CVE-2013-4831

HP Service Manager 9.30 through 9.32 does not properly manage privileges, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2013-4830

CVE-2013-4830 affects HP Service Manager versions 9.30–9.32, where a remote attacker could execute arbitrary code through an unspecified injection. The issue is documented in HP’s HPSBMU02931 security bulletin, which lists affected software (HP Service Manager v7.11, v9.32, v9.31, v9.30) and prov...

CVE-2013-4830

HP Service Manager 9.30 through 9.32 allows remote attackers to execute arbitrary code via an unspecified "injection" approach...

CVE-2013-4833

Cross-site scripting XSS vulnerability in HP Service Manager 9.30 through 9.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4831

HP Service Manager 9.30–9.32 exposes a privilege-management flaw that allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. Root cause: improper privilege handling within these versions. Impact, per sources, is limited to the affected HP Service...

CVE-2013-4833

HP Service Manager versions 9.30–9.32 contain a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The vulnerability affects HP Service Manager and is associated with HP Security Bulletin HPSBMU02931 rev.2, which n...

CVE-2013-4832

HP Service Manager 9.30 through 9.32 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2013-4832

Summary of CVE-2013-4832 (HP Service Manager) Affected products: HP Service Manager versions 9.30 through 9.32. The vulnerability allows remote authenticated users to obtain sensitive information via unspecified vectors. The issue is documented with a NVD CVSS v2 base score of 4.0 (Medium) and ve...