CVE-2014-2633

Cross-site request forgery CSRF vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-2633

The CVE-2014-2633 issue affects HP Service Manager (SM) Server components in HP SM 7.21 and SM 9.x up to before 9.34. The vulnerability is a Cross-Site Request Forgery (CSRF) that could allow an attacker to hijack user authentication via unspecified vectors. HP’s Security Bulletin HPSBMU03079 rev...

CVE-2013-6222

CVE-2013-6222 affects HP Service Manager (SM) Mobility Web Client and Service Request Catalog components. The XSS vulnerability exists in SM versions 7.21 and 9.x before 9.34, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The HP security bulletin (HPSBMU03079)...

CVE-2014-2634

Unspecified vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors...

PT-2014-4836

Name of the Vulnerable Software and Affected Versions HP Service Manager versions 7.21 through 9.33 Description The issue allows remote attackers to execute arbitrary code. The estimated number of potentially affected devices and details about real-world incidents are not specified. Recommendatio...

PT-2014-4838

Name of the Vulnerable Software and Affected Versions HP Service Manager versions 7.21 through 9.33 Description The issue allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service. The exact vectors used for the attack are not specified...

PT-2014-4837

Name of the Vulnerable Software and Affected Versions HP Service Manager versions 7.21 through 9.33 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendatio...

PT-2014-3065

Name of the Vulnerable Software and Affected Versions HP Service Manager versions 7.21 through 9.33 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system...

CVE-2013-6222: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2633: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-2632: Undefined Security Weakness

Unspecified vulnerability in the WebTier component in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-2634: Undefined Security Weakness

Unspecified vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors...

PT-2014-5031

Name of the Vulnerable Software and Affected Versions IBM Tivoli Business Service Manager versions 4.2.0 before 4.2.0.0 IF12 IBM Tivoli Business Service Manager versions 4.2.1 before 4.2.1.3 IF9 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web...

CVE-2014-3031

CVE-2014-3031 : In IBM Tivoli Business Service Manager, versions 4.2.0 before 4.2.0.0 IF12 and 4.2.1 before 4.2.1.3 IF9 are affected by a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. The root cause is an ...

CVE-2014-3031: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 4.2.0 before 4.2.0.0 IF12 and 4.2.1 before 4.2.1.3 IF9 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Oracle Automated Service Manager 1.3 Installation Local Privilege Escalation

No description provided by source. Oracle Automated Service Manager 1.3 local root during install Larry W. Cashdollar 1/29/2013 @larry0 SUNWsasm-1.3.1-20110815093723 https://updates.oracle.com/Orion/Services/download?type=readme&aru=15864534 From the README: Oracle Automated Service Manager 1.3.1...

[security bulletin] HPSBGN03008 rev.1 - HP Software Service Manager, "HeartBleed" OpenSSL Vulnerability, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04248997 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04248997 Version: 1 HPSBGN03008 rev....

CVE-2014-1984

Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2014-1983

Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service CPU consumption via unknown vectors...

Session fixation

Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors...