HP System Management Homepage multiple security vulnerabilities

DoS, XSS, CSRF, clickjacking, unauthorized access, information leakage...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03112)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

[security bulletin] HPSBMU03112 rev.1 - HP System Management Homepage (SMH) on Linux and Windows, Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04463322 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04463322 Version: 1 HPSBMU03112 rev....

HP System Management Homepage vulnerable to cross-site scripting

Overview HP System Management Homepage versions 7.2.3 and 7.3.2.1 contain a reflected cross site scripting vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - CVE-2014-2640HP System Management Homepage versions 7.2.3 and 7.3.2.1...

CVE-2014-2642

HP System Management Homepage SMH before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-2641

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-2640

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Code injection

HP System Management Homepage SMH before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-2640

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2641

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-2642

HP System Management Homepage SMH before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-2642

CVE-2014-2642 applies to HP System Management Homepage (SMH) prior to version 7.4, with a clickjacking vulnerability described in multiple sources (HP Security Bulletin HPSBMU03112 rev.1 and related CVE mappings). The connected documents confirm the affected product and the specific issue (clickj...

HP System Management Homepage Login Utility

This module attempts to login to HP System Management Homepage using host operating system authentication. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/smh' require...

HP System Management Homepage 7.1.2 Local 权限提升漏洞

No description provided by source...

Android new vulnerability exposure: hack may fake and authentic applications-vulnerability warning-the black bar safety net

Ticker 7 on 3 0 September morning news, on Tuesday released a study on the display, the Google Android operating system has a security vulnerability that can allow a hacker to fake a trusted formal application, thereby hijacking the user's smartphone or tablet. The security company Bluebox Securi...

HP System Management Homepage < 7.2.4.1 / 7.3.3.1 OpenSSL Multiple Vulnerabilities

According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server has an implementation of the OpenSSL library that is affected by the following vulnerabilities : - An error exists in the ssl3readbytes function that allows data to be injected...

HPSystem Management Homepage (SMH) <= 2.1.12 - 'message.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30846/info HP System Management Homepage SMH is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the conte...

HP System Management Homepage <= 3.0.2 'servercert' Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37968/info HP System Management Homepage, also known as Systems Insight Manager, is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an...