HP SiteScope loadFileContent SOAP Request Information Disclosure

An information disclosure vulnerability has been reported in HP SiteScope...

HP SiteScope SOAP Call APISiteScopeImpl Multiple Information Disclosures

Two access control weaknesses have been reported in HP SiteScope...

HP SiteScope multiple security vulnerabilities

Information leakage, code execution...

[security bulletin] HPSBMU02815 SSRT100715 rev.3 - HP SiteScope SOAP Security Issues, Remote Disclosure of Information, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03489683 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03489683 Version: 3 HPSBMU02815...

CVE-2012-3264

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472...

CVE-2012-3263

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465...

CVE-2012-3260

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462...

CVE-2012-3262

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464...

CVE-2012-3261

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463...

CVE-2012-3259

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461...

Design/Logic Flaw

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464...

Design/Logic Flaw

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462...

Design/Logic Flaw

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461...

Code injection

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465...

CVE-2012-3262

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464...

CVE-2012-3263

HP SiteScope versions 11.10–11.12 are affected by CVE-2012-3263 due to a vulnerability in the SOAP feature that could allow remote code execution via unknown vectors (ZDI-CAN-1465). The HP Security Bulletin HPSBMU02815 rev.3 documents that update v11.13 fixes the issue; after applying the update,...

CVE-2012-3259

HP SiteScope SOAP vulnerability CVE-2012-3259 affects SiteScope v11.10–11.12 (Windows/Linux/Solaris). The issue is in the SOAP feature, allowing remote code execution via unknown vectors (ZDI-CAN-1461). HP’s security bulletin SSRT100715 (HPSBMU02815) states a patch is available: SiteScope update ...

CVE-2012-3262

HP SiteScope SOAP vulnerability CVE-2012-3262 affects SiteScope versions 11.10–11.12. The issue allows remote code execution via the SOAP API due to vulnerabilities in the SOAP features, with CVSS 2.0 base score 10.0 (high). HP’s remediation is SiteScope update v11.13, and to mitigate, disable th...

CVE-2012-3264

HP SiteScope SOAP features in versions 11.10–11.12 are affected by multiple vulnerabilities that can lead to remote code execution and information disclosure (ZDI-1472). The HP Security Bulletin HPSBMU02815 rev.3 confirms affected software versions and documents that HP released SiteScope update ...

CVE-2012-3260

CVE-2012-3260 is an HP SiteScope vulnerability affecting 11.10–11.12 in the SOAP feature that allows remote code execution via unknown vectors (ZDI-CAN-1462). HP’s security bulletin SSRT100715 rev.3 confirms remote disclosure of information and code execution across SiteScope SOAP APIs and specif...