87 matches found
CVE-2017-14352
HP UCMDB Configuration Manager (HPE UCMDB) applications versions 10.10–10.23 are affected by a cross-site scripting vulnerability. The CVE-2017-14352 entry notes remote exploitation could allow script execution in a user’s browser. CVSSv3 vectors indicate NETWORK access, LOW attack complexity, PR...
CVE-2017-14352
A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting...
HPE UCMDB 'UploadFileOnUIServerServlet' Servlet Path Handling RCE (HPESBGN03758)
The version of HP Universal Configuration Management Database Server UCMDB running on the remote web server is missing a security patch. It is, therefore, affected by a remote code execution vulnerability in the 'UploadFileOnUIServerServlet' servlet due to improper handling of user-supplied paths...
HP Universal Configuration Management Database Foundation Redirection Vulnerability
The HP Universal Configuration Management Database UCMDB Foundation is a suite of database software from Hewlett-Packard HP that stores, controls, and manages software and infrastructure components and their interrelationships. A security vulnerability exists in HP UCMDB Foundation that stems fro...
HP UCMDB Browser information disclosure Vulnerability(CVE-2 0 1 5-6 8 6 2)-vulnerability warning-the black bar safety net
Affected system: HP HP UCMDB Browser the 4.02 Description: CVECAN ID: CVE-2 0 1 5-6 8 6 2 HP UCMDB Browser is to access UCMDB data of the lightweight Web client. HP UCMDB Browser 4.02 prior version there is a security vulnerability. A remote attacker could exploit this vulnerability can obtain...
CVE-2015-6862
HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors...
Information disclosure
HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors...
CVE-2015-6862
HPE UCMDB Browser is affected by CVE-2015-6862. The vulnerability enables an information-disclosure/unauthorized access bypass in UCMDB Browser versions prior to 4.02 via unspecified vectors. Impact is exposure of sensitive data and potential bypass of access controls. The connected CNVD/NVD entr...
CVE-2015-6862
HPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass intended access restrictions via unspecified vectors...
CVE-2015-5440
HP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before 10.11CUP6, and 10.2x before 10.21 allows local users to obtain sensitive information via unspecified vectors...
Information disclosure
HP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before 10.11CUP6, and 10.2x before 10.21 allows local users to obtain sensitive information via unspecified vectors...
CVE-2015-5440
HP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before 10.11CUP6, and 10.2x before 10.21 allows local users to obtain sensitive information via unspecified vectors...
CVE-2015-5440
HP UCMDB local information disclosure (CVE-2015-5440) affects HP UCMDB server versions 10.00, 10.01 (pre-10.01CUP12), 10.10, 10.11 (pre-10.11CUP6), and 10.2x (pre-10.21). A local attacker can obtain sensitive information via unspecified vectors; HP lists exact patch versions: 10.01CUP12 for v10.0...
HP UCMDB information discosure
No description provided...
[security bulletin] HPSBGN03504 rev.1 - HP UCMDB, Local Disclosure of Sensitive Information
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04790231 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04790231 Version: 1 HPSBGN03504 rev.1 - HP UCMDB, Local Disclosure of Sensitive...
Hewlett-Packard UCMDB - JMX-Console Authentication Bypass
CVE-ID: CVE-2014-7883Affected versions: UCMDB 10.10 Other versions might also be affected The HP Universal CMDB UCMDB automatically collects and manages accurate andcurrent business service definitions, associated infrastructure relationships anddetailed information on the assets, and is a centra...
HP UCMDB information disclosure
No description provided...
[security bulletin] HPSBMU03239 rev.1 - HP UCMDB, Remote Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04553906 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04553906 Version: 1 HPSBMU03239 rev....
Design/Logic Flaw
HP Universal CMDB UCMDB Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response...