211 matches found
CVE-2018-6487
CVE-2018-6487 affects Micro Focus Universal CMDB Foundation Software (multiple versions: 10.10–10.31 and 4.10–4.11). The connected sources confirm a remote information disclosure vulnerability, but do not provide the technical root cause, exploit details, or concrete remediation steps within the ...
HPE Universal CMDB Remote Code Execution And XSS Vulnerabilities
The host is installed with HP Universal CMDB and is prone to remote cross site scripting and code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbhpeuniversalcmdbxssncodeexecvuln.nasl 7497 2017-10-19 07:06:06Z santu $ HPE Universal CMDB Remote Code Execution And XSS Vulnerabilities...
HPE Universal CMDB 'HTTP TRACE' Information Disclosure Vulnerability
The host is installed with HP Universal CMDB and is prone to an information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbhpeuniversalcmdbhttptraceinfodiscvuln.nasl 7497 2017-10-19 07:06:06Z santu $ HPE Universal CMDB 'HTTP TRACE' Information Disclosure Vulnerability Authors: Rinu...
Qualys new look and new products
As you all know, it's Black Hat 2017 time. This year Qualys seems to be the main newsmaker among Vulnerability Management vendors. Qualys Team renewed logo and website, updated marketing strategy, presented two new products: CloudView and CertView. I decided to take a look. Talking about design, ...
HPE Universal CMDB Arbitrary Code Execution Vulnerability
HPE Universal CMDB is the Universal Management Configuration Database from Hewlett Packard Enterprise HPE, USA. An arbitrary code execution vulnerability exists in HPE Universal CMDB that could allow a remote attacker to execute arbitrary code via carefully crafted serialized Java objects...
HP/HPE/Micro Focus Universal CMDB RCE Vulnerability (HPESBGN03758)
HP/HPE/Micro Focus Universal CMDB is prone to a remote code execution RCE vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...
Hewlett Packard Enterprise Universal CMDB UploadFileOnUIServerServlet Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Universal CMDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within UploadFileOnUIServerServlet servlet. The issue results from...
HP/HPE/Micro Focus Universal CMDB Multiple Vulnerabilities (HPSBGN03622, HPSBGN03623)
HP/HPE/Micro Focus Universal CMDB CMDB is prone to remote information disclosure and code execution vulnerabilities. Copyright C 2016 Greenbone Networks GmbH, http://www.greenbone.net Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
HP/HPE/Micro Focus Universal CMDB Detection (HTTP)
HTTP based detection of HP/HPE/Micro Focus Universal CMDB. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...
HPE Universal CMDB Information Disclosure Vulnerability
HPE Universal CMDB is the Universal Management Configuration Database UCMDB from Hewlett Packard Enterprise HPE, USA. An information disclosure vulnerability exists in HPE Universal CMDB versions 10.0, 10.01, 10.10, 10.11, 10.20,10.21, which allows remote attackers to obtain sensitive information...
HPE Universal CMDB Arbitrary Code Execution Vulnerability
HPE Universal CMDB is the Universal Management Configuration Database, UCMDB, of Hewlett Packard Enterprise HPE, USA. An arbitrary code execution vulnerability exists in HPE Universal CMDB versions 10.0 through 10.21, Universal CMDB Configuration Manager versions 10.0 through 10.21,Universal...
CVE-2016-4368
HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...
CVE-2016-4368
HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...
CVE-2016-4367
The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensitive information via unspecified vectors...
Design/Logic Flaw
HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...
Design/Logic Flaw
The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2016-4367
CVE-2016-4367 affects the HPE Universal CMDB Universal Discovery component (versions 10.0, 10.01, 10.10, 10.11, 10.20, 10.21). The issue allows remote attackers to obtain sensitive information via unspecified vectors. The connected documents do not provide concrete exploit details or a disclosed ...
CVE-2016-4368
CVE-2016-4368 affects HPE Universal CMDB products (UCMDB Server/Configuration Manager/Universal Discovery) versions 10.0–10.21. The root cause is unsafe deserialization of unauthenticated Java objects to the Apache Commons Collections (ACC) library, enabling remote code execution. Impact is remot...
