CVE-2018-7090: Improper Neutralization of Input During Web Page Generation

HPE XP P9000 Command View Advanced Edition Software CVAE has local and remote cross site scripting vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr...

CVE-2017-8988: Undefined Security Weakness

A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00. The vulnerability impacts DevMgr Earlier than 8.5.3-00 for Windows, Linux, RepMgr earlier than 8.5.3-00 for Windows, Linux and HDLM earlier than 8.5.3-00 f...

CVE-2018-7091: URL Redirection to Untrusted Site

HPE XP P9000 Command View Advanced Edition Software CVAE has open URL redirection vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr...

PT-2018-8482

Name of the Vulnerable Software and Affected Versions HPE XP Command View Advanced Edition Software versions prior to 8.5.3-00 DevMgr versions prior to 8.5.3-00 RepMgr versions prior to 8.5.3-00 HDLM versions prior to 8.5.3-00 Description A Remote Bypass of Security Restrictions issue was...

PT-2018-17896

Name of the Vulnerable Software and Affected Versions HPE XP P9000 Command View Advanced Edition Software CVAE versions 7.0.0-00 through earlier than 8.60-00 of DevMgr, TSMgr and RepMgr. Description The issue is related to an open URL redirection. Recommendations For versions 7.0.0-00 through...

PT-2018-17895

Name of the Vulnerable Software and Affected Versions HPE XP P9000 Command View Advanced Edition Software CVAE versions 7.0.0-00 through earlier than 8.60-00 of DevMgr, TSMgr and RepMgr. Description The issue is related to a local and remote cross-site scripting vulnerability. Recommendations For...

CVE-2016-4378

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

CVE-2016-4378: Exposure of Sensitive Information to an Unauthorized Actor

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

CVE-2016-2003

Summary: CVE-2016-2003 affects HPE P9000 Command View Advanced Edition Software (CVAE) 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00. Root cause: remote code execution via crafted serialized Java objects, related to the Apache Commons Collections library, due to insecure de...

PT-2016-4955

Name of the Vulnerable Software and Affected Versions HPE P9000 Command View Advanced Edition Software CVAE versions 7.x through 8.x before 8.4.0-00 XP7 CVAE versions 7.x through 8.x before 8.4.0-00 Description The issue allows remote attackers to execute arbitrary commands via a crafted serializ...

CVE-2016-2003: Undefined Security Weakness

HPE P9000 Command View Advanced Edition Software CVAE 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

PT-2015-3951

Name of the Vulnerable Software and Affected Versions HP Device Manager versions 6.x through 8.x before 8.1.2-00 HP XP P9000 Command View Advanced Edition Software Online Help affected versions not specified HP XP P9000 Replication Manager versions 6.x and 7.x before 7.6.1-06 HP XP P9000 Tiered...

CVE-2014-7896: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Tiered Storage Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Replication Manager 6.x and 7.x before...