Design/Logic Flaw

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464...

Design/Logic Flaw

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461...

Design/Logic Flaw

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463...

Design/Logic Flaw

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472...

Code injection

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465...

CVE-2012-3264

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472...

CVE-2012-3259

HP SiteScope SOAP vulnerability CVE-2012-3259 affects SiteScope v11.10–11.12 (Windows/Linux/Solaris). The issue is in the SOAP feature, allowing remote code execution via unknown vectors (ZDI-CAN-1461). HP’s security bulletin SSRT100715 (HPSBMU02815) states a patch is available: SiteScope update ...

CVE-2012-3260

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462...

CVE-2012-3262

HP SiteScope SOAP vulnerability CVE-2012-3262 affects SiteScope versions 11.10–11.12. The issue allows remote code execution via the SOAP API due to vulnerabilities in the SOAP features, with CVSS 2.0 base score 10.0 (high). HP’s remediation is SiteScope update v11.13, and to mitigate, disable th...

PT-2012-4607

Name of the Vulnerable Software and Affected Versions HP SiteScope versions 11.10 through 11.12 Description The issue is related to an unspecified vulnerability in a SOAP feature, allowing remote attackers to execute arbitrary code via unknown vectors. Recommendations For HP SiteScope versions...

CVE-2012-3263: Undefined Security Weakness

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465...

CVE-2012-3262: Undefined Security Weakness

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464...

CVE-2012-3259: Undefined Security Weakness

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461...

CVE-2012-3261: Undefined Security Weakness

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463...

CVE-2012-3260: Undefined Security Weakness

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462...

CVE-2012-3264: Undefined Security Weakness

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472...

SAP Host Control SOAP Web Service Detection

SAP Host Control, a SOAP endpoint, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62292; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"SAP Host Control SOAP Web Service Detection"; scriptsummaryenglish:"Looks f...

SAP Host Control SOAP Web Service 'Database/Name' Command Execution (SAP Note 1341333)

The version of SAP Host Control, offered by 'sapstartsrv.exe', fails to sanitize user input to the 'Database/Name' parameter when calling the 'GetDatabaseStatus' SOAP method. A remote, unauthenticated attacker may use this to run commands that, by default, run as SYSTEM. Note that while this...

SAP Control SOAP Web Service Detection

SAP Control, a SOAP endpoint, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62291; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"SAP Control SOAP Web Service Detection"; scriptsummaryenglish:"Looks for the SOA...

CVE-2012-3451

Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body...