CVE-2013-6222

Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2632

Unspecified vulnerability in the WebTier component in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-6222

CVE-2013-6222 affects HP Service Manager (SM) Mobility Web Client and Service Request Catalog components. The XSS vulnerability exists in SM versions 7.21 and 9.x before 9.34, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The HP security bulletin (HPSBMU03079)...

CVE-2014-2634

HP Service Manager (SM) exposed vulnerability CVE-2014-2634 affecting SM versions 7.21 and 9.x prior to 9.34. The server component could be accessed in a way that bypasses intended access controls, allowing remote attackers to modify data or cause a denial of service via unspecified vectors. The ...

CVE-2014-2632

HP Service Manager CVE-2014-2632 affects the WebTier component across SM 7.21 and SM 9.x up to 9.33, allowing remote code execution via unknown vectors. The HP security bulletin HPSBMU03079 rev.1 documents an increase of privilege and other vulnerabilities impacting WebTier, with CVSSv2 base scor...

CVE-2014-2633

The CVE-2014-2633 issue affects HP Service Manager (SM) Server components in HP SM 7.21 and SM 9.x up to before 9.34. The vulnerability is a Cross-Site Request Forgery (CSRF) that could allow an attacker to hijack user authentication via unspecified vectors. HP’s Security Bulletin HPSBMU03079 rev...

CVE-2014-2629

HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors related to...

Design/Logic Flaw

HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors related to...

CVE-2014-2629

The CVE-2014-2629 issue affects HP NonStop Safeguard Security Software G and the J/K release branches (G: H06.03–H06.28.01; J: J06.03–J06.17.01). The vulnerability arises from improper evaluation of the DISKFILE-PATTERN ACL on a program object file, allowing remote authenticated users to bypass i...

CVE-2014-2629

HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors related to...

CVE-2014-2630

Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors...

Code injection

Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors...

CVE-2014-2630

CVE-2014-2630 affects HP Glance/Performance Monitoring xglance-bin (HP Operations Agent 11.00). Vulnerable code path due to insecure RPATH (-L/lib64) used by SetUID/SetGID binaries, enabling local privilege escalation to root. Impact described as privilege escalation; fixed version HPSBMU03086 re...

CVE-2014-2630

Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors...

CVE-2014-2631

Unspecified vulnerability in HP Application Lifecycle Management aka Quality Center 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138...

CVE-2014-2628

Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in HP Application Lifecycle Management aka Quality Center 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138...

Code injection

Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2014-2631

Unspecified vulnerability in HP Application Lifecycle Management aka Quality Center 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138...

HP Version Control Agent (VCA) < 7.3.3 Multiple SSL Vulnerabilities

The installation of HP Version Control Agent VCA on the remote Windows host is a version prior to 7.3.3. It is, therefore, affected by multiple vulnerabilities in the bundled version of SSL : - An error exists in the 'ssl3readbytes' function that permits data to be injected into other sessions or...