210 matches found
Input validation
An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...
Cross site request forgery (csrf)
A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2017-8972
A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...
CVE-2017-5782
CVE-2017-5782 concerns a missing HSTS header vulnerability in HPE Matrix Operating Environment (MOE) version v7.6. The issue, described as a missing HSTS header, is highlighted across multiple sources (NVD entry and CNVD/CVE mirrors). According to the NVD metrics, this vulnerability has a network...
CVE-2017-5781
A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2016-8532
A cross site scripting vulnerability in HPE Matrix Operating Environment version 7.6 was found...
CVE-2017-8971
CVE-2017-8971 is a documented clickjacking vulnerability in HP Matrix Operating Environment (MOE) version 7.6 LR1. The connected sources identify HP MOE as the affected product and characterize the issue as a clickjacking vulnerability in its web-facing interface. The NVD entry provides CVSS scor...
CVE-2017-8973
CVE-2017-8973 describes an improper input validation vulnerability in HPE Matrix Operational Environment (HPE MOE) version 7.6 LR1 . The available documentation identifies the root cause as input validation flaws within the product, leading to potential impact described as unspecified in the prov...
CVE-2016-8534
CVE-2016-8534 corresponds to a remote privilege-elevation vulnerability in HPE Matrix Operating Environment (MOE) 7.6; CNVD-2018-05101 also states SIM (Systems Insight Manager) 7.6 is affected. The vulnerability allows an attacker to elevate privileges on affected MOE/SIM installations. Documente...
CVE-2016-8532
Affected products: HPE Matrix Operating Environment Software (v7.6) and Systems Insight Manager (SIM) Software (v7.6). Vulnerability: Cross-site scripting in the web interface. Root cause / exploitability: XSS vulnerability that could allow a remote attacker to inject arbitrary Web script or HTML...
CVE-2017-8973
An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...
CVE-2017-5780
A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2016-8533
A remote priviledge escalation vulnerability in HPE Matrix Operating Environment version 7.6 was found...
CVE-2016-8535
A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found...
CVE-2017-5784
A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...
CVE-2016-8534
A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found...
CVE-2016-8535
Summary: CVE-2016-8535 corresponds to a remote HTTP parameter pollution vulnerability in HPE Matrix Operating Environment 7.6 . The connected data confirms the issue affects this product/version and cites a vulnerability descriptor; no vendor-supplied exploit specifics, attack vectors, or confirm...
CVE-2017-8972
A clickjacking vulnerability affects HP Matrix Operating Environment (Matrix OE) 7.6 LR1. The CVE-2017-8972 entry notes a clickjacking flaw; NVD data shows CVSS scores (2.0: 4.0, 3.0: 4.3) with network access and low complexity. Connected documents also describe the same issue across multiple sou...
CVE-2016-8533
CVE-2016-8533 describes a remote privilege-escalation in HPE Matrix Operating Environment 7.6 (and SIM 7.6 per CNVD) that can be exploited over the network to raise privileges. CVSSv3 score is 8.8 HIGH (network, low privileges required, no user interaction). The root cause is not explicitly detai...