HP Insight Control Server Migration 7.3.0 and 7.3.1 OpenSSL Heartbeat Information Disclosure (Heartbleed)

According to its version, the HP Insight Control Server Migration install on the remote Windows host includes a bundled copy of OpenSSL that is affected by an information disclosure vulnerability. A remote attacker could read the contents of up to 64KB of server memory, potentially exposing...

Code injection

Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to obtain sensitive information or modify data via unknown vectors...

CVE-2010-3993

HP Insight Control Server Migration for Windows (HP) is affected by CVE-2010-3993 and is vulnerable prior to version 6.2. The HP security bulletin and CVSS data describe a remote vulnerability that could lead to unauthorized access and data modification, with base score 6.4 (MEDIUM). Mitigation: ...

PT-2010-5224

Name of the Vulnerable Software and Affected Versions HP Insight Control Server Migration versions prior to 6.2 Description The issue allows remote authenticated users to gain privileges via unknown vectors. Recommendations For versions prior to 6.2, update to version 6.2 or later to resolve the...

CVE-2010-3991: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3992: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2010-3993: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to obtain sensitive information or modify data via unknown vectors...

PT-2010-5223

Name of the Vulnerable Software and Affected Versions HP Insight Control Server Migration versions prior to 6.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 6.2, update to version 6.2 or later to...

CVE-2010-1557

HP Insight Control Server Migration contains a cross-site scripting (XSS) vulnerability in versions prior to 6.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected product appears in multiple sources as HP Insight Control Server Migrati...

CVE-2010-1557: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HP Insight Control Server Migration before 6.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...