HP SiteScope EmailServlet Information Disclosure (CVE-2014-2614)

An information disclosure vulnerability has been reported in HP SiteScope. The vulnerability is due to a lack of input validation in the EmailServlet servlet when processing HTTP requests. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the...

Hewlett-Packard SiteScope EmailServlet servlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EmailServlet servlet. The issue lies in the ability to download arbitrar...

PT-2014-4818

Name of the Vulnerable Software and Affected Versions HP SiteScope versions 11.1x through 11.13 HP SiteScope versions 11.2x through 11.24 Description The issue allows remote attackers to bypass authentication, potentially leading to information disclosure. The estimated number of potentially...