EUVD-2014-2660

Malware in sbrugna...

CVE-2014-2628

Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2014-2628

Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2014-2628

CVE-2014-2628 concerns HP Enterprise Maps 1, where remote authenticated users can disclose sensitive information via unknown vectors. The vulnerability is documented in HP’s security bulletin HPSBMU03081 rev.1, which specifies that only HP Enterprise Maps v1 is affected and that HP has provided a...

[security bulletin] HPSBMU03081 rev.1 - HP Enterprise Maps, Remote Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04390793 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04390793 Version: 1 HPSBMU03081 rev....

CVE-2014-4669

HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity XXE issue...

Xxe

HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity XXE issue...

CVE-2014-4669

HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity XXE issue...

HP Enterprise Maps 1.00 Authenticated XXE Injection

HP Enterprise Maps 1.00 Authenticated XXE vulnerability http://www8.hp.com/us/en/software/enterprise-software.html Any user that has the ability to import a file to create an artifact most, if not all authed users? can upload a specially crafted WSDL that will read files such as /etc/passwd. If y...