CVE-2010-1036

HP System Insight Manager (HP SIM) before 6.0 contains CVE-2010-1036, a remote XSS that lets an attacker inject arbitrary web script or HTML via unspecified vectors. The HP security bulletin HPSBMA02525 recommends upgrading to HP SIM 6.0 or later; CVSS v2 base score is cited as 6.8 (AV:N/AC:M/Au:...

CVE-2010-1037

HP System Insight Manager (SIM) running on HP-UX, Linux, and Windows prior to version 6.0 is vulnerable to a CSRF flaw that could allow remote attackers to hijack user sessions. The vulnerability affects SIM components listed in the HP security bulletin (HPSBMA02525 rev.1) and is addressed by upg...

CVE-2010-1038

CVE-2010-1038 affects HP System Insight Manager (HPSIM) before version 6.0. It describes an unspecified privilege-escalation vulnerability that could be exploited by remote authenticated users via unknown vectors. The HP security bulletin confirms the issue and recommends upgrading to HP System I...

CVE-2010-1037

Cross-site request forgery CSRF vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...