Input validation

An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...

Hardcoded credentials

A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5785

A remote information disclosure vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-8972

A clickjacking vulnerability affects HP Matrix Operating Environment (Matrix OE) 7.6 LR1. The CVE-2017-8972 entry notes a clickjacking flaw; NVD data shows CVSS scores (2.0: 4.0, 3.0: 4.3) with network access and low complexity. Connected documents also describe the same issue across multiple sou...

CVE-2017-8973

CVE-2017-8973 describes an improper input validation vulnerability in HPE Matrix Operational Environment (HPE MOE) version 7.6 LR1 . The available documentation identifies the root cause as input validation flaws within the product, leading to potential impact described as unspecified in the prov...

CVE-2017-5785

A remote information disclosure vulnerability is present in HPE Matrix Operating Environment Software version 7.6 (and SIM Software version 7.6 per CNVD). The issue could allow a remote attacker to obtain sensitive information. No root-cause or exploit details are provided in the connected docume...

CVE-2017-8971

CVE-2017-8971 is a documented clickjacking vulnerability in HP Matrix Operating Environment (MOE) version 7.6 LR1. The connected sources identify HP MOE as the affected product and characterize the issue as a clickjacking vulnerability in its web-facing interface. The NVD entry provides CVSS scor...

CVE-2017-8971

A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...

CVE-2017-8970

A remote unauthenticated disclosure of information vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...

CVE-2016-8535

A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2017-5783

A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2016-8533

A remote priviledge escalation vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2016-8532

Affected products: HPE Matrix Operating Environment Software (v7.6) and Systems Insight Manager (SIM) Software (v7.6). Vulnerability: Cross-site scripting in the web interface. Root cause / exploitability: XSS vulnerability that could allow a remote attacker to inject arbitrary Web script or HTML...

CVE-2016-8532

A cross site scripting vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2016-8531

A remote information disclosure vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2017-5784

CVE-2017-5784 : A missing HSTS header vulnerability affects Hewlett Packard Enterprise’s Matrix Operating Environment (MOE) version 7.6. The CVE entry notes HSTS misconfiguration as the underlying issue, with CVSS metrics indicating a Medium severity (CVSSv2 base 5.8, CVSSv3 base 6.5). Connected ...

CVE-2016-8534

CVE-2016-8534 corresponds to a remote privilege-elevation vulnerability in HPE Matrix Operating Environment (MOE) 7.6; CNVD-2018-05101 also states SIM (Systems Insight Manager) 7.6 is affected. The vulnerability allows an attacker to elevate privileges on affected MOE/SIM installations. Documente...

CVE-2016-8531

The connected CNVD entry describes an information disclosure vulnerability in HPE Matrix Operating Environment Software version 7.6 (and SIM Software version 7.6). It allows a remote attacker to obtain sensitive information. No explicit remediation or patch details are provided in the connected d...

CVE-2017-5781

A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5782

CVE-2017-5782 concerns a missing HSTS header vulnerability in HPE Matrix Operating Environment (MOE) version v7.6. The issue, described as a missing HSTS header, is highlighted across multiple sources (NVD entry and CNVD/CVE mirrors). According to the NVD metrics, this vulnerability has a network...