CVE-2018-7090: Improper Neutralization of Input During Web Page Generation

HPE XP P9000 Command View Advanced Edition Software CVAE has local and remote cross site scripting vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr...

CVE-2018-7091: URL Redirection to Untrusted Site

HPE XP P9000 Command View Advanced Edition Software CVAE has open URL redirection vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr...

CVE-2017-8988: Undefined Security Weakness

A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00. The vulnerability impacts DevMgr Earlier than 8.5.3-00 for Windows, Linux, RepMgr earlier than 8.5.3-00 for Windows, Linux and HDLM earlier than 8.5.3-00 f...

HPESBHF03823 rev.1 - HPE XP Command View Advanced Edition Software (CVAE), Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP Command View Advanced Edition Software earlier than 8.5.3-00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5641 |...

CVE-2016-4381

HPE XP7 Command View Advanced Edition CVAE Suite 6.x through 8.x before 8.4.1-02, when Replication Manager RepMgr and Device Manager DevMgr are enabled, allows local users to bypass intended access restrictions via unspecified vectors...

CVE-2016-4381: Undefined Security Weakness

HPE XP7 Command View Advanced Edition CVAE Suite 6.x through 8.x before 8.4.1-02, when Replication Manager RepMgr and Device Manager DevMgr are enabled, allows local users to bypass intended access restrictions via unspecified vectors...

Design/Logic Flaw

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

CVE-2016-4378: Exposure of Sensitive Information to an Unauthorized Actor

The 1 Device Manager, 2 Tiered Storage Manager, 3 Replication Manager, 4 Replication Monitor, and 5 Hitachi Automation Director HAD components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers ...

HPE P9000 CVAE Arbitrary Command Execution Vulnerability

HP XP P9000 Command View Advanced Edition is a multifunctional device manager for HP XP P9500, XP Disk Array products. A security vulnerability exists in HPE P9000 Command View Advanced Edition Software CVAE and XP7 CVAE, which allows remote attackers to execute arbitrary commands via constructed...

CVE-2016-2003

Summary: CVE-2016-2003 affects HPE P9000 Command View Advanced Edition Software (CVAE) 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00. Root cause: remote code execution via crafted serialized Java objects, related to the Apache Commons Collections library, due to insecure de...

CVE-2016-2003: Undefined Security Weakness

HPE P9000 Command View Advanced Edition Software CVAE 7.x and 8.x before 8.4.0-00 and XP7 CVAE 7.x and 8.x before 8.4.0-00 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

CVE-2014-7896: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Tiered Storage Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Replication Manager 6.x and 7.x before...

[security bulletin] HPSBST02919 rev.1 - HP XP P9000 Command View Advanced Edition Suite Software, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03898171 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03898171 Version: 1 HPSBST02919 rev....

CVE-2013-4814

Cross-site scripting XSS vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4814: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3281

Unspecified vulnerability in Device Manager in HP XP P9000 Command View Advanced Edition before 7.4.0-00 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2012-3281: Undefined Security Weakness

Unspecified vulnerability in Device Manager in HP XP P9000 Command View Advanced Edition before 7.4.0-00 allows remote attackers to cause a denial of service via unknown vectors...

[security bulletin] HPSBST02839 SSRT101077 rev.1 - HP XP P9000 Command View Advanced Edition, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03650706 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03650706 Version: 1 HPSBST02839...

Cross site scripting

Cross-site scripting XSS vulnerability in CMDREDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request...

CVE-2009-2216

Cross-site scripting XSS vulnerability in CMDREDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request...