CVE-2017-8948

CVE-2017-8948 describes a remote bypass of security restrictions in HP/NNMi (HPE Network Node Manager i) software. Affected are NNMi versions v10.0x, v10.1x, and v10.2x. The CVSS metrics indicate high severity (CVSSv3: 9.8) with unauthenticated network access and no user interaction required; imp...

CVE-2017-8948: Undefined Security Weakness

A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i NNMi Software versions v10.0x, v10.1x, v10.2x was found...

PT-2017-3623

Name of the Vulnerable Software and Affected Versions: HPE Network Node Manager i NNMi versions v10.0x through v10.2x Description: The issue is related to security mechanism weaknesses in HPE Network Node Manager i NNMi. It may allow a remote attacker to perform cross-site scripting attacks XSS,...

CVE-2016-2013

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2016-2011

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010...

CVE-2016-2009

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

Cross site scripting

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010...

CVE-2016-2013

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2016-2011

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010...

PT-2016-4959

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20 through 10.01 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HPE Network Node...

PT-2016-4963

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.01 Description The issue allows remote authenticated users to modify data or cause a denial of service. Recommendations For versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.0...

PT-2016-4962

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 Description The issue allows remote authenticated users to obtain sensitive information. Recommendations For versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01, a...

PT-2016-4961

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.01 Description The issue allows remote attackers to bypass authentication via unspecified vectors. Recommendations For versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.01, at...

CVE-2016-2010: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2011...

CVE-2016-2009: Improper Access Control

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

CVE-2016-2013: Exposure of Sensitive Information to an Unauthorized Actor

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2016-2011: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010...

PT-2016-4960

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20 through 10.01 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HPE Network Node...

PT-2016-4958

Name of the Vulnerable Software and Affected Versions HPE Network Node Manager i NNMi versions 9.20 through 9.25, 10.00, 10.01 Description The issue allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC...

CVE-2016-2012: Improper Authentication

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to bypass authentication via unspecified vectors...