CVE-2011-4155

Cross-site scripting XSS vulnerability in HP Network Node Manager i NNMi 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4156...

CVE-2011-4156

Cross-site scripting XSS vulnerability in HP Network Node Manager i NNMi 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4155...

CVE-2011-4155

CVE-2011-4155 is an XSS vulnerability reported for HP Network Node Manager i (NNMi) in 9.0x and 9.1x, enabling remote injection of arbitrary web script/HTML via unspecified vectors. Connected documents also describe related entries (CVE-2011-5184) with multiple XSS vectors in NNMi 9.10 (specific ...

CVE-2011-4156

CVE-2011-4156 is described in the supplied records as a cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi). The connected documents discuss multiple XSS vulnerabilities in NNMi v9.10 (and references to potential duplicates of 2011-4155/2011-4156), including XSS via param...

PT-2011-4861

Name of the Vulnerable Software and Affected Versions HP Network Node Manager i NNMi versions 9.0x through 9.1x Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HP Network Node Manager i NNMi...

PT-2011-4862

Name of the Vulnerable Software and Affected Versions HP Network Node Manager i NNMi versions 9.0x through 9.1x Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For HP Network Node Manager i NNMi...

CVE-2011-4156: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Network Node Manager i NNMi 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4155...

CVE-2011-4155: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Network Node Manager i NNMi 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4156...

[security bulletin] HPSBMU02712 SSRT100649 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03054052 Version: 1 HPSBMU02712 SSRT100649 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...

CVE-2011-3167

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210...

Code injection

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210...

Design/Logic Flaw

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1208...

CVE-2011-3165

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1208...

CVE-2011-3166

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1209...

CVE-2011-3167

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210...

CVE-2011-3165

HP OpenView Network Node Manager (OV NNM) versions 7.51 and 7.53 are affected by multiple remote code execution vulnerabilities (CVE-2011-3165, CVE-2011-3166, CVE-2011-3167) due to insufficient input validation/boundary checks in components such as nnmRptConfig.exe CGI, ov.dll (format string hand...

CVE-2011-3167

HP OpenView Network Node Manager (NNM) is affected by CVE-2011-3167, a remote code execution vulnerability in the ov.dll module. The issue is a stack-based overflow in the internal function _OVBuildPath when processing overly long input via the web CGI flow (long textFile argument to webappmon.ex...

CVE-2011-3166

HP OpenView Network Node Manager (NNM) is affected by CVE-2011-3166 in the webappmon.exe CGI program, where an insufficient boundary check before a format string leads to a stack overflow and remote code execution. Exploitation is remote and unauthenticated via crafted HTTP requests. Vendor advis...

PT-2011-4285

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code. The vulnerability is related to the nnmRptConfig.exe and nameParams components. Recommendations For versions...

PT-2011-4286

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code. It involves the webappmon.exe parameter. No information is provided about the estimated number of potentially...