HPE BSM Platform Application Performance Management System Health Arbitrary File Deletion Vulnerability

HPE BSM Platform Application Performance Management System Health is a suite of application performance management systems for the BSM platform from Hewlett Packard Enterprise HPE. A security vulnerability exists in HPE BSM Platform Application Performance Management System Health versions 9.26,...

CVE-2014-3031

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 4.2.0 before 4.2.0.0 IF12 and 4.2.1 before 4.2.1.3 IF9 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 4.2.0 before 4.2.0.0 IF12 and 4.2.1 before 4.2.1.3 IF9 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

BSM Store Dependent Forums 1.02 UserName Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25072/info BSM Store Dependent Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

HP Business Service Management multiple security vulnerabilities

Information leakage, unauthorized access, DoS...

CVE-2012-2561

HP Business Service Management BSM 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444...

Code injection

HP Business Service Management BSM 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444...

CVE-2012-2561

CVE-2012-2561 affects HP Business Service Management (BSM) 9.12 where uploading a .war file to the JBOSS component can lead to remote JSP code execution via crafted requests to TCP ports 1098/1099/4444. The root cause is improper restriction of .war uploads, enabling an attacker to deploy a JSP s...

CVE-2012-2561

HP Business Service Management BSM 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444...

CVE-2011-0274

HP BAC (Business Availability Center) and BSM (Business Service Management) versions affected are BAC 7.x up to 7.55, BAC 8.x up to 8.05, and BSM up to 9.01. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified ...

CVE-2008-4081

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie...

Authentication flaw

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie...

CVE-2008-4081

CVE-2008-4081 affects Stash 1.0.3: admin/login.php permits remote authentication bypass by setting a bsm cookie, enabling administrative access. The NVD lists a CVSS 2.0 base score of 7.5 (HIGH) with network access and low attack complexity. No explicit remediation details are provided in the con...

CVE-2008-4081

admin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain administrative access by setting a bsm cookie...

CVE-2007-5422

Unspecified vulnerability in "Solaris Auditing" in the Basic Security Module BSM in Sun Solaris 10, when configured for auditing of networking nt events, allows local users to cause a denial of service panic via unspecified vectors...

CVE-2007-5422

CVE-2007-5422 affects Sun Solaris 10, specifically the Solaris Auditing feature within the Basic Security Module (BSM). When configured to audit networking (nt) events, a local attacker can trigger a denial-of-service (panic) via unspecified vectors. The available sources describe the affected co...

CVE-2007-4095

SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...

Sql injection

SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...

CVE-2007-4095

SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...

CVE-2007-4095

CVE-2007-4095 describes an SQL injection in BSM Store Dependent Forums 1.02, likely via the FrmUserName parameter in login.asp (Username field). The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting data confidentiality, integrity, and potentially availability as ...