Information disclosure

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, which could let a remote malicious user obtain sensitive information. This is the...

PT-2020-7824

Name of the Vulnerable Software and Affected Versions: HP SiteScope versions 11.2 through 11.3 HP Asset Manager versions 9.30 through 9.32 HP Asset Manager versions 9.40 through 9.41 HP Asset Manager version 9.50 Asset Manager Cloudsystem Chargeback version 9.40 Description: An Information...

CVE-2015-2802: Exposure of Sensitive Information to an Unauthorized Actor

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, which could let a remote malicious user obtain sensitive information. This is the...

Asset Manager Automation and Accounting Software Command Execution

The vulnerability of the Asset Manager and Asset Manager CloudSystem Chargeback software lies in improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely, using a specially crafted serialized Java object related to the Apache Commons...

HPE Asset Manager Arbitrary Code Execution Vulnerability

HP AssetManager is a solution for managing the lifecycle of IT assets. A security vulnerability exists in HPE Asset Manager 9.40, 9.41, 9.50, and Asset Manager CloudSystem Chargeback 9.40, which can be exploited by remote attackers to execute arbitrary commands via constructed serialized Java...

PT-2016-1644

Name of the Vulnerable Software and Affected Versions HPE Asset Manager versions 9.40 through 9.50 Asset Manager CloudSystem Chargeback version 9.40 Description The issue is related to incorrect data processing, allowing a remote attacker to execute arbitrary commands using a specially crafted...

CVE-2016-2000: Undefined Security Weakness

HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...