HP Operations Manager i Apache Flex BlazeDS External Entity Injection Vulnerability

The remote HP Operations Manager i host is affected by an XML external entity XXE vulnerability in the bundled version of Apache Flex BlazeDS due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. A remote attacker can exploit this, via a specially...

Code injection

Unspecified vulnerability in HP Operations Manager i OMi 9.22, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2015-2137

HP Operations Manager i (OMi) versions 9.22–10.01 are affected by an unspecified remote code execution vulnerability (CVE-2015-2137). The issue allows remote code execution via unknown vectors and is rated high/severe (CVSSv2 base 9.3, impact C/I/A). HP’s Security Bulletin HPSBGN03393 rev.1 notes...