EUVD-2018-18852

Malware in sbrugna...

HPESBGN04226 rev.2 - HPE enhanced Interactive Unified Mediation (eIUM), Apache Log4j 2 Remote Arbitrary Code Execution and Remote Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Enhanced Interactive Unified Mediation eIUM 9.x, 10.6.3 - 9.x version is vulnerable only if Infinispan cache or CIS module is used CVSS Scores: | CVE |...

Cross site scripting

A potential security vulnerability has been identified in HPE enhanced Internet Usage Manager eIUM versions 8.3 and 9.0. The vulnerability could be used for unauthorized access to information via cross site scripting. HPE has made the following software updates to resolve the vulnerability in eIU...

CVE-2019-11997

CVE-2019-11997 affects HPE eIUM versions 8.3 and 9.0, where a cross-site scripting vulnerability could allow unauthorized access to information. Affected users should apply the eIUM83FP01Patch_QXCR1001711284.20190806-1244 for 8.3 FP01, or upgrade to eIUM 9.0 FP02 PI5 or later. Other versions requ...

CVE-2019-11997: Improper Neutralization of Input During Web Page Generation

A potential security vulnerability has been identified in HPE enhanced Internet Usage Manager eIUM versions 8.3 and 9.0. The vulnerability could be used for unauthorized access to information via cross site scripting. HPE has made the following software updates to resolve the vulnerability in eIU...

PT-2020-9231

Name of the Vulnerable Software and Affected Versions HPE enhanced Internet Usage Manager eIUM versions 8.3 and 9.0 Description A potential security issue has been identified that could allow unauthorized access to information via cross-site scripting. Recommendations For eIUM version 8.3, instal...

CVE-2018-7109

HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager eIUM v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM...

Design/Logic Flaw

HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager eIUM v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM...

CVE-2018-7109

HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager eIUM v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM...

CVE-2018-7109

HPE eIUM (enhanced Internet Usage Manager), a real-time billing platform, is affected by CVE-2018-7109. The vulnerability is described as a remote arbitrary file modification vulnerability in eIUM v9.0FP1 (and related 9.0 FP01-based builds). The root cause details are not fully disclosed in the p...

PT-2018-17911

Name of the Vulnerable Software and Affected Versions HPE enhanced Internet Usage Manager eIUM version 9.0FP1 Description A remote arbitrary file modification issue has been identified. HPE has addressed this issue with a cumulative patch for version 9.0FP1. Recommendations For HPE enhanced...