CVE-2013-2362

HP System Management Homepage (SMH) CVE-2013-2362 describes a stack buffer overflow in the iprange parameter handling (proxy/DataValidation) that allows a remote, unauthenticated attacker to execute arbitrary code on Windows targets as SYSTEM. The vulnerability is associated with ZDI-1676 and aff...

CVE-2013-2365

CVE-2013-2365 affects HP Database and Middleware Automation (DMA) 10.0 and 10.01. When using SSL, remote attackers could disclose information via unspecified vectors. CVSSv2 base 7.9 (HIGH) with complete impact on confidentiality, integrity, and availability. HP’s advisory (HPSB) indicates DMA v1...

CVE-2013-2356

HP System Management Homepage SMH before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2363...

CVE-2013-2361

CVE-2013-2361 describes an XSS vulnerability in HP System Management Homepage (SMH) prior to version 7.2.1. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. HP’s security bulletin HPSBMU02900 rev.3 states affected software is SMH before 7.2.1 and no...

CVE-2013-2362

Unspecified vulnerability in HP System Management Homepage SMH before 7.2.1 allows local users to cause a denial of service via unknown vectors, aka ZDI-CAN-1676...

CVE-2012-5217

HP System Management Homepage SMH before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2355...

CVE-2013-2355

HP System Management Homepage SMH before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2012-5217...

CVE-2013-2365

HP Database and Middleware Automation DMA 10.x before 10.10, when SSL is used, allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-2355

HP System Management Homepage (SMH) before 7.2.1 allows remote unauthorized access and potential information disclosure. The CVE-2013-2355 entry refers to unspecified vectors but is listed alongside other SMH vulnerabilities; HP’s security bulletin HPSBMU02900 documents the fix by upgrading to SM...

CVE-2013-2363

HP System Management Homepage SMH before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2356...

CVE-2013-2356

HP System Management Homepage (SMH) before 7.2.1 is vulnerable to remote information disclosure via unspecified vectors. The security bulletin notes SMH v7.2.0 and earlier on Linux/Windows and lists an upgrade to SMH 7.2.1 or later as the fix. Affected component: HP SMH; root cause details are no...

CVE-2013-2364

CVE-2013-2364 is an XSS flaw in HP System Management Homepage (SMH) prior to v7.2.1. Remote authenticated users could inject arbitrary web scripts via unspecified vectors, potentially impacting confidentiality and integrity of SMH sessions. Public records consistently cite SMH

CVE-2013-2360

HP System Management Homepage (SMH) for Linux/Windows is affected up to version 7.2.0; CVE-2013-2360 describes a remote DoS risk for remote—authenticated users via unknown vectors. HP’s Security Bulletin HP-SMH states the fix is SMH v7.2.1 or later to resolve these vulnerabilities. Connected Red ...

CVE-2013-2361

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-2357

Unspecified vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2358, CVE-2013-2359, and CVE-2013-2360...

CVE-2013-2359

HP System Management Homepage (SMH) before version 7.2.1 is affected by CVE-2013-2359, allowing remote authenticated users to cause a Denial of Service via unknown vectors. HP’s security bulletin HPSBMU02900 rev.3 states remediation to SMH v7.2.1 or later for Windows and Linux. The CVSS v2 base s...

CVE-2013-2364

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5217

HP System Management Homepage (SMH) vulnerability CVE-2012-5217 affects SMH versions prior to 7.2.1. It allows remote attackers to bypass access restrictions and obtain sensitive information via unspecified vectors. This is separate from CVE-2013-2355. HP’s Security Bulletin notes the remediation...

CVE-2013-2360

Unspecified vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2359...

CVE-2013-2359

Unspecified vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2360...