CVE-2017-14353

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution...

CVE-2017-14354

HP UCMDB Foundation Software versions 10.10–10.33 are affected by a remote cross-site scripting vulnerability (CVE-2017-14354). The NVD entry describes remote XSS with medium severity (CVSS v3 base 6.1) and provides affected version ranges. Connected OpenVAS content also references remote XSS and...

CVE-2017-14354: Improper Neutralization of Input During Web Page Generation

A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting...

CVE-2017-14353: Improper Control of Generation of Code

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution...

PT-2017-13412

Name of the Vulnerable Software and Affected Versions HP UCMDB Foundation Software versions 10.10 through 10.33 Description A remote cross-site scripting issue could be exploited to allow cross-site scripting. Recommendations For HP UCMDB Foundation Software versions 10.10 through 10.33, update t...

PT-2017-13411

Name of the Vulnerable Software and Affected Versions HP UCMDB Foundation Software versions 10.10 through 10.33 Description A remote code execution issue could be remotely exploited to allow code execution. Recommendations For HP UCMDB Foundation Software versions 10.10 through 10.33, update to a...

HP Shared ArcSight Source Code with Russians

Reuters is reporting that HP Enterprise gave the Russians a copy of the ArcSight source code. The article highlights that ArcSight is used by the Pentagon to protect classified networks, but the security risks are much broader. Any weaknesses the Russians discover could be used against any ArcSig...

CVE-2017-14351

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution...

CVE-2017-14352

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting...

CVE-2017-14352

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting...

Design/Logic Flaw

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution...

CVE-2017-14352: Improper Neutralization of Input During Web Page Generation

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting...

CVE-2017-14351: Undefined Security Weakness

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution...

CVE-2017-14352

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting...

CVE-2017-14351

HP UCMDB Configuration Manager (versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23) is listed as affected by a vulnerability that could allow remote code execution. The provided sources state the possibility of remote exploitation but do not include concrete exploit details or remediation steps. T...

CVE-2017-14352

HP UCMDB Configuration Manager (HPE UCMDB) applications versions 10.10–10.23 are affected by a cross-site scripting vulnerability. The CVE-2017-14352 entry notes remote exploitation could allow script execution in a user’s browser. CVSSv3 vectors indicate NETWORK access, LOW attack complexity, PR...

CVE-2017-14351

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution...

PT-2017-13410

Name of the Vulnerable Software and Affected Versions HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23 Description A potential security issue has been identified that could be remotely exploited to allow cross-site scripting. Recommendations For HP UCMDB...

PT-2017-13409

Name of the Vulnerable Software and Affected Versions HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23 Description A potential security issue has been identified that could be remotely exploited to allow code execution. Recommendations For HP UCMDB Configuration...

HP System Management Homepage < 7.6.1 Multiple Vulnerabilities (HPSBMU03753)

According to its banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.6.1. It is, therefore, affected by multiple vulnerabilities including multiple local and remote code execution vulnerabilities. Note that Nessus has not tested for these issues...