964 matches found
PT-2014-3046
Name of the Vulnerable Software and Affected Versions HP Service Manager versions 9.30 through 9.33 Description The issue allows remote attackers to hijack the authentication of victims for requests, enabling them to insert XSS sequences or execute arbitrary code. Recommendations For HP Service...
CVE-2013-6202: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that 1 insert XSS sequences or 2 execute arbitrary code...
[security bulletin] HPSBMU02959 rev.1 - HP Service Manager WebTier and Windows Client, Cross-Site Scripting (XSS), Execution of Arbitrary Code and other Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04052075 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04052075 Version: 1 HPSBMU02959 rev....
HP Service Manager security vulnerabilities
Crossite scripting, code execution...
HP Service Manager WebTier and Windows Client未明跨站脚本漏洞
CVE ID:CVE-2013-6198 HP Service Manager是一款软件即服务可以帮助您迅速部署一个全面的IT 服务管理解决方案。 HP Service Manager WebTier and Windows Client存在未明跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 HP Service Manager WebTier and Windows Client 9.20 HP Service Manager WebTier and Windows Client 9.21 厂商补丁： HP ---...
HP Service Manager WebTier and Windows Client未明代码执行漏洞
CVE ID:CVE-2013-6197 HP Service Manager是一款软件即服务可以帮助您迅速部署一个全面的IT 服务管理解决方案。 HP Service Manager WebTier and Windows Client存在未明安全漏洞，允许通过验证的远程用户执行任意代码。 0 HP Service Manager WebTier and Windows Client 9.20 HP Service Manager WebTier and Windows Client 9.21 厂商补丁： HP ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...
CVE-2013-6198
Cross-site scripting XSS vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6197
Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Code injection
Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors...
CVE-2013-6198
HP Service Manager WebTier and Windows Client 9.20 and 9.21 are affected by CVE-2013-6198, a cross-site scripting (XSS) vulnerability with unspecified vectors that could allow remote injection of malicious script or HTML in the context of a logged-in user. Impact is partial integrity compromise t...
CVE-2013-6197
HP Service Manager WebTier and Windows Client versions 9.20 and 9.21 are affected by CVE-2013-6197 (before 9.21.661 p8), enabling remote authenticated users to execute arbitrary code via unknown vectors. The HP advisory HPSBMU02959 rev.1 and related HP security bulletin summarize the vulnerabilit...
CVE-2013-6197
Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors...
CVE-2013-6198
Cross-site scripting XSS vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2013-5972
Name of the Vulnerable Software and Affected Versions HP Service Manager WebTier and Windows Client versions 9.20 and 9.21 before 9.21.661 p8 Description The issue allows remote authenticated users to execute arbitrary code via unknown vectors. Recommendations For versions 9.20 and 9.21 before...
CVE-2013-6197: Undefined Security Weakness
Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors...
CVE-2013-6198: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2013-5973
Name of the Vulnerable Software and Affected Versions HP Service Manager WebTier and Windows Client versions 9.20 and 9.21 before 9.21.661 p8 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For...
[security bulletin] HPSBGN02942 rev.1 - HP Service Manager and ServiceCenter, Remote Code Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04026812 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04026812 Version: 1 HPSBGN02942 rev....