Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to obtain sensitive information or modify data via unknown vectors...

CVE-2010-4024

Cross-site request forgery CSRF vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3991

Cross-site scripting XSS vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3988

Unspecified vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to bypass intended access restrictions and cause a denial of service via unknown vectors...

CVE-2010-3987

CVE-2010-3987 affects HP Insight Control Virtual Machine Management before version 6.2. The vulnerability is a remote XSS via unspecified vectors, with impact stated as I:P, no confidentiality or availability loss, and no user authentication required. HP’s security bulletin HPSBMA02598 rev.2 indi...

CVE-2010-3987

Cross-site scripting XSS vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3989

Cross-site request forgery CSRF vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3988

HP Insight Control Virtual Machine Management for Windows prior to v6.2 contains a Denial of Service vulnerability (CVE-2010-3988) that can be triggered remotely, as noted in HP security bulletin and CVE records. The vulnerability affects HP Insight Control VM Management before 6.2 and was addres...

CVE-2010-4024

CVE-2010-4024 affects HP Insight Control Power Management (before 6.2). The vulnerability is a Cross-Site Request Forgery (CSRF) that could allow remote attackers to hijack the authentication of victims via unknown vectors. The NVD notes a CVSS v2 base score of 6.8 (MEDIUM) with network access, n...

CVE-2010-3993

HP Insight Control Server Migration for Windows (HP) is affected by CVE-2010-3993 and is vulnerable prior to version 6.2. The HP security bulletin and CVSS data describe a remote vulnerability that could lead to unauthorized access and data modification, with base score 6.4 (MEDIUM). Mitigation: ...

CVE-2010-4023

CVE-2010-4023 affects HP Insight Control Power Management for Windows (before version 6.2). The vulnerability is a remote Cross-Site Scripting (XSS) issue that could allow an attacker to inject arbitrary web script or HTML via unspecified vectors. HP’s Security Bulletin HPSBMA02603 rev.1 states t...

CVE-2010-3992

HP Insight Control Server Migration for Windows, before v6.2, contains a vulnerability (CVE-2010-3992) that could allow remote authenticated users to gain privileges. The HP security bulletin for SSRT100316 rev.1 rates CVE-2010-3992 with a base CVSS v2.0 vector of AV:N/AC:L/Au:S/C:P/I:C/A:P and a...

CVE-2010-3991

CVE-2010-3991 concerns HP Insight Control Server Migration for Windows prior to v6.2. The vulnerability is a remote cross-site scripting (XSS) flaw in the product’s web interface, allowing an attacker to inject arbitrary web script or HTML via unspecified vectors. The affected component is HP Ins...

CVE-2010-4023

Cross-site scripting XSS vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3989

HP Insight Control Virtual Machine Management for Windows is affected by CVE-2010-3989: a CSRF vulnerability allows remote attackers to hijack user sessions in installations prior to version 6.2. The issue affects HP Insight Control VM management before 6.2, with the payload described in HP secur...

CVE-2010-3991: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3987: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

HP Systems Insight Manager Arbitrary File Download Vulnerability

HP Systems Insight Manager is prone to a vulnerability that lets attackers download arbitrary files. Exploiting this issue will allow an attacker to view arbitrary files within the context of the application. Information harvested may aid in launching further attacks. The issue affects HP Systems...