24 matches found
CVE-2024-7427 Potential Cross-Site Scripting vulnerability affect OpenText™ Network Node Manager i (NNMi).
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in OpenText™ Network Node Manager i NNMi could allow Cross-Site Scripting XSS.This issue affects Network Node Manager i NNMi: 2022.11, 2023.05, 23.4, 24.2...
CVE-2024-7427
CVE-2024-7427 is an XSS vulnerability in OpenText Network Node Manager i (NNMi). Affected NNMi versions are 2022.11, 2023.05, 23.4, and 24.2, with the root cause being improper neutralization of input during web page generation. Impact is Cross-Site Scripting (XSS); CVSS v4 base score is 4.8 (MED...
CVE-2024-7428
OpenText Network Node Manager i (NNMi) is affected by a URL Redirection to Untrusted Site (Open Redirect) vulnerability. The issue targets NNMi versions 2022.11, 2023.05, 23.4, and 24.2 and is described as allowing URL redirector abuse. The root cause is an open redirect condition that enables re...
CVE-2024-7428 Potential Open Redirect issues affect OpenText™ Network Node Manager i (NNMi).
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in OpenText™ Network Node Manager i NNMi allows URL Redirector Abuse.This issue affects Network Node Manager i NNMi: 2022.11, 2023.05, 23.4, 24.2...
CVE-2017-8948
CVE-2017-8948 describes a remote bypass of security restrictions in HP/NNMi (HPE Network Node Manager i) software. Affected are NNMi versions v10.0x, v10.1x, and v10.2x. The CVSS metrics indicate high severity (CVSSv3: 9.8) with unauthenticated network access and no user interaction required; imp...
CVE-2016-2013
HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2016-2011
Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010...
CVE-2016-2009
HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...
Cross site scripting
Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010...
CVE-2016-2013
HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2016-2011
Cross-site scripting XSS vulnerability in HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010...
CVE-2013-6220
HP Network Node Manager i (NNMi) versions 9.0, 9.10 and 9.20 are affected by a remote cross-site scripting (XSS) vulnerability (CVE-2013-6220) that could allow injection of script/HTML via unspecified vectors. HP/NNMi Security Bulletin HPSBMU03035_REV.1 documents the impact and provides hotfixes ...
Code injection
Unspecified vulnerability in HP Network Node Manager i NNMi 9.00, 9.1x, and 9.2x allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...
CVE-2013-2351
HP NNMi (HP Network Node Manager i) versions 9.00, 9.1X, and 9.2X are affected by CVE-2013-2351. The ZDI advisory describes a flaw in pmd.exe that listens on TCP port 162; a specially crafted packet can cause a heap corruption and remote code execution without authentication. HP/SSRT bulletin SSR...
CVE-2012-3279
Multiple cross-site scripting XSS vulnerabilities in HP Network Node Manager i NNMi 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-3279
HP NNMi affects NNMi v8.x and v9.0x/v9.1x/v9.20 across HP-UX, Linux, Solaris and Windows. The flaw is remote XSS via unspecified vectors allowing injection of arbitrary web script/HTML; CVSS 2.0 base 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N). Remediation per HP security bulletin: upgrade to v9.0x/v9.1x/v...
CVE-2012-3275
CVE-2012-3275 affects HP Network Node Manager i (NNMi) 9.1x and 9.20 across HP-UX, Linux, Solaris, and Windows. The HP advisory notes a remote code execution possibility via unknown vectors, with CVSSv2 base score 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C). Remediation consists of platform-specific hotfixe...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject arbitrary web script or HTML via the 1 node parameter to nnm/mibdiscover; 2 nodename parameter to nnm/protected/configurationpoll.jsp, 3 nnm/protected/ping.jsp, 4...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in HP Network Node Manager i NNMi 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-2018
HP NNMi is vulnerable to a remote Cross-Site Scripting (XSS) in NNMi versions 8.x, 9.0x and 9.1x, allowing injection of arbitrary scripts via unspecified vectors. The CVSS v2.0 base score is 4.3 (MEDIUM) with Network attack vector, no authentication required, but with partial integrity impact. HP...