CVE-2011-1857

CVE-2011-1857 affects HP Service Manager v7.02, v7.11, v9.20, v9.21 and HP Service Center v6.2.8. The issue allows remote authenticated users to bypass access restrictions via unspecified vectors. The CVSS v2 base score is 8.2 (High) with network access, medium complexity, single authentication, ...

CVE-2011-1857

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote authenticated users to bypass intended access restrictions via unknown vectors...

CVE-2011-1860

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors...

CVE-2011-1863

CVE-2011-1863 concerns HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center (v6.2.8). The connected documents confirm a remote-authenticated script-injection vulnerability affecting the Web/Web Tier components, with HP’s Security Bulletin detailing multiple related CVEs and ...

CVE-2011-1858

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows local users to bypass intended access restrictions via unknown vectors...

CVE-2011-1860

CVE-2011-1860 affects HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center 6.2.8. The vulnerability enables remote attackers to capture HTTP session credentials, via unspecified vectors, with a CVSSv2 base score of 5.0 (Network, Low complexity, no authentication, partial con...

CVE-2011-1861

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to modify data or obtain sensitive information via unknown vectors...

CVE-2011-1859

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2011-1859

CVE-2011-1859 affects HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center 6.2.8. The HP Security Bulletin SEC-HP (HPSBMA02674) documents remote disclosure of privileged information and related flaws (including unauthorized remote access) in the Web Tier/Web components, with...

CVE-2011-1862

Cross-site scripting XSS vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1858

HP Service Manager and HP Service Center are affected by multiple vulnerabilities including CVE-2011-1858 (Unsecured Local Access) that allow local users to bypass access restrictions. Affected versions: SM 9.21, 9.20, 7.11, 7.02 and SC 6.2.8. The HP Security Bulletin HPSBMA02674 rev.1 documents ...

CVE-2011-1862

CVE-2011-1862 is an XSS vulnerability in HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center 6.2.8. The underlying issue is a cross-site scripting flaw allowing injection of arbitrary web script/HTML via unspecified vectors. The HP security bulletin HPSBMA02674 rev.1 docume...

CVE-2011-1859: Undefined Security Weakness

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2011-1860: Undefined Security Weakness

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to capture HTTP session credentials via unknown vectors...

PT-2011-3422

Name of the Vulnerable Software and Affected Versions HP Service Manager versions 7.02, 7.11, 9.20, 9.21 HP Service Center version 6.2.8 Description The issue allows remote attackers to modify data or obtain sensitive information. The exact vectors used for the attack are not specified...

CVE-2011-1862: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-3421

Name of the Vulnerable Software and Affected Versions HP Service Manager versions 7.02, 7.11, 9.20, 9.21 HP Service Center version 6.2.8 Description The issue allows remote attackers to capture HTTP session credentials. Recommendations For HP Service Manager versions 7.02, 7.11, 9.20, 9.21, and H...

CVE-2011-1858: Undefined Security Weakness

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows local users to bypass intended access restrictions via unknown vectors...

CVE-2011-1857: Undefined Security Weakness

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote authenticated users to bypass intended access restrictions via unknown vectors...

PT-2011-3418

Name of the Vulnerable Software and Affected Versions HP Service Manager versions 7.02, 7.11, 9.20, 9.21 HP Service Center version 6.2.8 Description The issue allows remote authenticated users to bypass intended access restrictions. The exact vectors used for the bypass are not specified...