CVE-2009-4185

Cross-site scripting XSS vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage SMH before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter...

CVE-2009-4185

HP System Management Homepage (SMH) before version 6.0.0.96/6.0.0-95 is vulnerable to a Cross-site scripting (XSS) flaw in the proxy/smhui/getuiinfo handler via the servercert parameter. The issue is addressed in HP’s security bulletin HPSBMA02504, which lists affected platforms (Windows and Linu...

[security bulletin] HPSBMA02428 SSRT090048 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01745065 Version: 1 HPSBMA02428 SSRT090048 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin shoul...

Cross site scripting

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 3.0.1.73 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1418

CVE-2009-1418 affects HP System Management Homepage (SMH) prior to version 3.0.1.73. The vulnerability is a remote cross-site scripting (XSS) flaw allowing injection of arbitrary script/HTML via unspecified vectors in SMH’s web interface. Affected platforms include SMH running on Linux and Window...

HP/HPE System Management Homepage (SMH) Unspecified Security Bypass Vulnerability (HPSBMA02380)

HP/HPE System Management Homepage SMH is prone to a local security bypass vulnerability. Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...

CVE-2008-4413

HP System Management Homepage (SMH) for HP-UX is affected by CVE-2008-4413. Affected versions: SMH 2.2.6 and earlier on HP-UX B.11.11 and B.11.23; SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31. Vulnerability allows local unauthorized access via unspecified vectors (possibly related...

CVE-2008-4413

Unspecified vulnerability in HP System Management Homepage SMH 2.2.6 and earlier on HP-UX B.11.11 and B.11.23, and SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31, allows local users to gain "unauthorized access" via unknown vectors, possibly related to temporary file permissions...

[security bulletin] HPSBMA02380 SSRT080121 rev.1 - HP System Management Homepage (SMH) for HP-UX, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01586921 Version: 1 HPSBMA02380 SSRT080121 rev.1 - HP System Management Homepage SMH for HP-UX, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as...

HP/HPE System Management Homepage (SMH) Unspecified XSS Vulnerability (HPSBMA02376)

HP/HPE System Management Homepage SMH is prone to an unspecified cross-site scripting XSS vulnerability. Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2008-4411

HP System Management Homepage (SMH) for Linux/Windows is vulnerable to a cross-site scripting (XSS) issue in versions before 2.1.15.210. A remote attacker can exploit unspecified vectors to inject arbitrary HTML/script in the user’s browser. This is tracked as CVE-2008-4411. HP provided a fixed r...

HPSystem Management Homepage (SMH) 2.1.12 - message.php Cross-Site Scripting

HPSystem Management Homepage SMH 2.1.12 - message.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30846/info HP System Management Homepage SMH is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting...

CVE-2008-1663

HP System Management Homepage (SMH) versions 2.1.10 and 2.1.11 on Linux and Windows are vulnerable to cross-site scripting (XSS) via unspecified vectors, allowing remote attackers to inject arbitrary script/HTML. The underlying issue is an XSS vulnerability in SMH that lacks details about input h...

CVE-2008-1663

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

[security bulletin] HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01488878 Version: 1 HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin shoul...

HP-UX PHSS_36870 : HP System Management Homepage (SMH) for HP-UX, XSS (HPSBMA02274 SSRT071445 rev.3)

s700800 11.23 HP System Management Homepage A.2.2.6.2 : Potential security vulnerabilities have been identified with HP System Management Homepage SMH for HP-UX. These vulnerabilities could by exploited remotely to allow cross site scripting XSS. %NASLMINLEVEL 70300 C Tenable Network Security, In...

CVE-2007-5302

Multiple cross-site scripting XSS vulnerabilities in HP System Management Homepage SMH in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-5302

HP System Management Homepage (SMH) is affected by CVE-2007-5302 due to cross-site scripting (XSS) vulnerabilities in SMH components. In HP-UX, affected O/S versions are B.11.11, B.11.23, and B.11.31; SMH versions prior to 2.1.10 are also affected on Linux and Windows. The impact is remote script...

CVE-2007-4931

HP System Management Homepage SMH for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for...

CVE-2007-4931

HP System Management Homepage (SMH) for Windows, when used with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update. Impact is unknown in the provided documents, and no remediation/fix is stated. Vulnerability details are othe...