HP Insight Control Server Migration 7.3.0 and 7.3.1 OpenSSL Heartbeat Information Disclosure (Heartbleed)

According to its version, the HP Insight Control Server Migration install on the remote Windows host includes a bundled copy of OpenSSL that is affected by an information disclosure vulnerability. A remote attacker could read the contents of up to 64KB of server memory, potentially exposing...

Code injection

Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to obtain sensitive information or modify data via unknown vectors...

CVE-2010-3993

HP Insight Control Server Migration for Windows (HP) is affected by CVE-2010-3993 and is vulnerable prior to version 6.2. The HP security bulletin and CVSS data describe a remote vulnerability that could lead to unauthorized access and data modification, with base score 6.4 (MEDIUM). Mitigation: ...

CVE-2010-1557

HP Insight Control Server Migration contains a cross-site scripting (XSS) vulnerability in versions prior to 6.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected product appears in multiple sources as HP Insight Control Server Migrati...