CVE-2011-1861

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to modify data or obtain sensitive information via unknown vectors...

CVE-2011-1862

CVE-2011-1862 is an XSS vulnerability in HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center 6.2.8. The underlying issue is a cross-site scripting flaw allowing injection of arbitrary web script/HTML via unspecified vectors. The HP security bulletin HPSBMA02674 rev.1 docume...

CVE-2011-1858

HP Service Manager and HP Service Center are affected by multiple vulnerabilities including CVE-2011-1858 (Unsecured Local Access) that allow local users to bypass access restrictions. Affected versions: SM 9.21, 9.20, 7.11, 7.02 and SC 6.2.8. The HP Security Bulletin HPSBMA02674 rev.1 documents ...

CVE-2011-1860

CVE-2011-1860 affects HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center 6.2.8. The vulnerability enables remote attackers to capture HTTP session credentials, via unspecified vectors, with a CVSSv2 base score of 5.0 (Network, Low complexity, no authentication, partial con...

CVE-2011-1863

CVE-2011-1863 concerns HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center (v6.2.8). The connected documents confirm a remote-authenticated script-injection vulnerability affecting the Web/Web Tier components, with HP’s Security Bulletin detailing multiple related CVEs and ...

CVE-2011-1862

Cross-site scripting XSS vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

[security bulletin] HPSBMA02674 SSRT100487 rev.1 - HP Service Manager and HP Service Center, Unauthorized Remote Access, Unsecured Local Access, Remote Disclosure of Privileged Information, HTTP Session Credential Re-use, Cross Site Scripting (XS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02863015 Version: 1 HPSBMA02674 SSRT100487 rev.1 - HP Service Manager and HP Service Center, Unauthorized Remote Access, Unsecured Local Access, Remote Disclosure of Privileged Information, HTTP...

HP Service Manager / HP Service Center multiple security vulnerabilities

Uauthorized access, privilege escalation, information leakage, HTTP session hijack, crossite scripting...

Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Sun Microsystems Directory Service Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within Sun Directory Server's LDAP implementation and can be triggered vi...

Hardcoded credentials

Unspecified vulnerability in HP Service Manager HPSM before 7.01.71 allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2008-4415

Unspecified vulnerability in HP Service Manager HPSM before 7.01.71 allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2008-4415

CVE-2008-4415 affects HP Service Manager (HPSM) up to version 7.01.71. The HP security bulletin (HPSBMA02385) documents a vulnerability that could allow an attacker to gain extended privileges or execute arbitrary code on authenticated remote access, with a base CVSSv2 score of 9.0 (AV:N/AC:L/Au:...

CVE-2008-4415

Unspecified vulnerability in HP Service Manager HPSM before 7.01.71 allows remote authenticated users to execute arbitrary code via unknown vectors...

[security bulletin] HPSBMA02385 SSRT080161 rev.1 - HP Service Manager (HPSM), Gain Extended Privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01603910 Version: 1 HPSBMA02385 SSRT080161 rev.1 - HP Service Manager HPSM, Gain Extended Privileges NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

HP Service Manager privilege escalation

No description provided...

CVE-2008-2165

Cross-site scripting XSS vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager BBSM Captive Portal 5.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

Cisco Building Broadband Service Manager Cross-Site Scripting Vulnerability

Cisco Building Broadband Service Manager BBSM 5.3 SP2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability exists due to an input validation error in certain web pages associated with the BBSM web...

Cisco Building Broadband Service Manager Captive Portal crossite scripting

Crossite scripting with http://host/ekgnkm/AccessCodeStart.asp?msg=3Cscript3Ealert22XSS22;3C/script3E...

Authentication flaw

IBM Tivoli Business Service Manager TBSM 4.1.1 stores passwords in cleartext 1 after external authentication, which triggers writing the password to SMserver.log; and 2 after a reconfig action; which allows local users to obtain sensitive information...

CVE-2008-0441

IBM Tivoli Business Service Manager TBSM 4.1.1 stores passwords in cleartext 1 after external authentication, which triggers writing the password to SMserver.log; and 2 after a reconfig action; which allows local users to obtain sensitive information...