CVE-2010-4104

CVE-2010-4104 affects HP Insight Orchestration before version 6.2. The vulnerability allows remote attackers to read arbitrary files via unknown vectors. The CVSSv2 base score is 5.0 (Network, Low interaction, Partial confidentiality impact). HP’s security bulletin HPSBMA02606/SECURITYVULNS:DOC:2...

CVE-2010-4101

Cross-site scripting XSS vulnerability in HP Insight Recovery before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4105

HP Insight Orchestration for Windows is affected by CVE-2010-4105: prior to v6.2, remote attackers can bypass access controls and potentially read/modify data or gain unauthorized access. The HP security bulletin HPSBMA02606/SSRT100321 rev.1 states vulnerable versions are HP Insight Orchestration...

CVE-2010-4102

CVE-2010-4102 affects HP Insight Recovery prior to 6.2. It allows remote attackers to read arbitrary files via unknown vectors. HP has addressed the issue in Insight Recovery v6.2 or later; apply the update to mitigate. The CVSS impact in the source entry is Base Score 5.0 (Medium). Details on ex...

CVE-2010-4103

Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2010-4032

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-4032

CVE-2010-4032 is a CSRF vulnerability in HP Insight Control Performance Management for Windows, pre-6.2, that could allow remote attackers to hijack user authentication via unknown vectors. The security bulletin indicates HP released v6.2 or later to resolve the issue; apply the update or equival...

CVE-2010-4106

HP Insight Control for Linux is affected by a Cross-Site Request Forgery (CSRF) vulnerability in versions prior to 6.2, which could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. The issue, CVE-2010-4106, has a CVSSv2 base score of 6.8 (MEDIUM). HP...

CVE-2010-4105

Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to bypass intended access restrictions, and obtain sensitive information or modify data, via unknown vectors...

CVE-2010-4030

Cross-site scripting XSS vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4031

Vulnerability CVE-2010-4031 affects HP Insight Control Performance Management for Windows (before 6.2). The issue allows remote authenticated users to gain privileges via unknown vectors due to an unspecified vulnerability in the affected software’s privilege handling. HP’s security bulletin conf...

CVE-2010-4101

CVE-2010-4101 is an XSS vulnerability in HP Insight Recovery for Windows prior to v6.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with network attack vector, no confidentiality impact,...

CVE-2010-4030

HP Insight Control Performance Management for Windows is affected by CVE-2010-4030 (XSS). The vulnerability exists in versions prior to 6.2 and could allow remote injection of arbitrary script/HTML via unspecified vectors. HP’s security bulletin (HPSBMA02602 rev.1) confirms the issue and states t...

CVE-2010-4100

HP Insight Control Performance Management for Windows (before 6.1 update 2) is affected by CVE-2010-4100. The vulnerability enables remote attackers to download/read arbitrary files via unknown vectors. HP’s security bulletin HP HPSBMA02600 (SSRT100239 rev.1) confirms the affected software and st...

CVE-2010-4024

Cross-site request forgery CSRF vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-4023

Cross-site scripting XSS vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3987

Cross-site scripting XSS vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3989

Cross-site request forgery CSRF vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3993

Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to obtain sensitive information or modify data via unknown vectors...

CVE-2010-3988

Unspecified vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to bypass intended access restrictions and cause a denial of service via unknown vectors...