CVE-2013-4823

HP Intelligent Management Center (iMC) and the Branch Intelligent Management System (BIMS) module contain CVE-2013-4823, an information-disclosure vulnerability in the bimsDownload servlet. The vulnerability arises from a lack of authentication and insufficient input validation, allowing remote a...

CVE-2013-4825

HP iMC/IMC Service Operation Management Software Module is affected by CVE-2013-4825, a remote authentication bypass that allows bypass of access restrictions. The issue stems from the HP iMC CommonUtils component exposure and is exploitable remotely (ZDI-1645). HP’s security bulletin HPSBGN02930...

PT-2013-5223

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC affected versions not specified HP IMC Service Operation Management Software Module affected versions not specified Description The issue allows remote attackers to bypass intended access restrictions. It i...

CVE-2013-4827: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZDI-CAN-1664...

PT-2013-5222

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC affected versions not specified HP IMC Service Operation Management Software Module affected versions not specified Description The issue allows remote attackers to bypass authentication. The estimated numb...

PT-2013-5224

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC affected versions not specified HP IMC Service Operation Management Software Module affected versions not specified Description The issue allows remote attackers to obtain sensitive information. The estimat...

PT-2013-5220

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC versions affected versions not specified HP IMC Branch Intelligent Management System Software Module aka BIMS versions affected versions not specified Description The issue allows remote attackers to execut...

CVE-2013-4822: Undefined Security Weakness

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Branch Intelligent Management System Software Module aka BIMS allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606...

CVE-2013-4824: Improper Authentication

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-1644...

CVE-2013-4823: Undefined Security Weakness

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Branch Intelligent Management System Software Module aka BIMS allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1607...

PT-2013-5225

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center iMC versions affected versions not specified HP IMC Service Operation Management Software Module versions affected versions not specified Description A SQL injection issue allows remote attackers to execute...

CVE-2013-4826: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647...

CVE-2013-4825: Undefined Security Weakness

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to bypass intended access restrictions via unknown vectors, aka ZDI-CAN-1645...

[security bulletin] HPSBGN02929 rev.1 - HP Intelligent Management Center (iMC), HP IMC Branch Intelligent Management System Software Module (BIMS), and Comware Based Switches and Routers, Remote Code Execution, Disclosure of Informati

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03943425 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03943425 Version: 1 HPSBGN02929 rev....

HP Intelligent Management Center UAM acmServletDownload Information Disclosure (CVE-2012-5211)

An information disclosure vulnerability has been reported in the UAM add-in module of HP Intelligent Management Center...

PT-2013-2954

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.x before 1.44 Cisco Unified Computing System UCS versions 2.x before 2.02m Description The issue allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco...

Hewlett-Packard Intelligent Management Center SyslogDownloadServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to obtain sensitive information on vulnerable installations of HP Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SyslogDownloadServlet servlet. This servlet suffers from a...

[security bulletin] HPSBGN02854 SSRT100881 rev.1 - HP Intelligent Management Center (iMC), iMC TACACS+ Authentication Manager (TAM), and iMC User Access Manager (UAM), Cross Site Scripting (XSS), Remote Code Execution,

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03689276 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03689276 Version: 1 HPSBGN02854...

CVE-2012-5206

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1660...

CVE-2012-5207

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1661...