CVE-2017-14354: Improper Neutralization of Input During Web Page Generation

A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting...

PT-2017-13412

Name of the Vulnerable Software and Affected Versions HP UCMDB Foundation Software versions 10.10 through 10.33 Description A remote cross-site scripting issue could be exploited to allow cross-site scripting. Recommendations For HP UCMDB Foundation Software versions 10.10 through 10.33, update t...

CVE-2017-14353: Improper Control of Generation of Code

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution...

CVE-2017-14351

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution...

CVE-2017-14352

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting...

CVE-2017-14352

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting...

Design/Logic Flaw

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution...

Cross site scripting

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting...

CVE-2017-14352: Improper Neutralization of Input During Web Page Generation

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting...

CVE-2017-14351: Undefined Security Weakness

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution...

CVE-2017-14351

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution...

CVE-2017-14352

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting...

CVE-2017-14351

HP UCMDB Configuration Manager (versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23) is listed as affected by a vulnerability that could allow remote code execution. The provided sources state the possibility of remote exploitation but do not include concrete exploit details or remediation steps. T...

CVE-2017-14352

HP UCMDB Configuration Manager (HPE UCMDB) applications versions 10.10–10.23 are affected by a cross-site scripting vulnerability. The CVE-2017-14352 entry notes remote exploitation could allow script execution in a user’s browser. CVSSv3 vectors indicate NETWORK access, LOW attack complexity, PR...

PT-2017-13410

Name of the Vulnerable Software and Affected Versions HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23 Description A potential security issue has been identified that could be remotely exploited to allow cross-site scripting. Recommendations For HP UCMDB...

PT-2017-13409

Name of the Vulnerable Software and Affected Versions HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23 Description A potential security issue has been identified that could be remotely exploited to allow code execution. Recommendations For HP UCMDB Configuration...

HPE UCMDB 'UploadFileOnUIServerServlet' Servlet Path Handling RCE (HPESBGN03758)

The version of HP Universal Configuration Management Database Server UCMDB running on the remote web server is missing a security patch. It is, therefore, affected by a remote code execution vulnerability in the 'UploadFileOnUIServerServlet' servlet due to improper handling of user-supplied paths...

HPESBGN03758 rev.2 - HPE UCMDB, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP UCMDB Configuration Manager Software - v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8947 |...

PT-2016-3256

Name of the Vulnerable Software and Affected Versions HPE UCMDB versions v10.10 through v10.31 Description A Remote Code Execution issue was discovered, related to the UploadFileOnUIServerServlet component in HPE UCMDB. This issue is associated with inadequate path name checking in a directory wi...

HP Universal Configuration Management Database Foundation Redirection Vulnerability

The HP Universal Configuration Management Database UCMDB Foundation is a suite of database software from Hewlett-Packard HP that stores, controls, and manages software and infrastructure components and their interrelationships. A security vulnerability exists in HP UCMDB Foundation that stems fro...