CVE-2017-13982

HPE BSM Platform Application Performance Management System Health suffers a directory traversal/unrestricted file upload flaw in versions 9.26, 9.30, and 9.40. The root cause involves the UploadManager servlet failing to validate user-supplied paths, enabling an attacker to upload arbitrary files...

CVE-2017-13983

CVE-2017-13983 describes an authentication bypass vulnerability in the HPE BSM Platform Application Performance Management System Health (Health) suite, affecting versions 9.26, 9.30 and 9.40. The flaw enables remote attackers to bypass authentication, with the ZDI advisory noting the System Heal...

CVE-2017-13985

The CVE-2017-13985 issue affects HPE BSM Platform Application Performance Management System Health (versions 9.26, 9.30, 9.40). The vulnerability is a path traversal/authentication flaw in the Email Servlet that leads to information disclosure. The ZDI advisory notes that exploitation requires au...

CVE-2017-13984

The CVE-2017-13984 issue affects Hewlett Packard Enterprise’s BSM Platform Application Performance Management System Health (HPE BSM Health) with versions 9.26, 9.30 and 9.40. The vulnerability resides in the SHExportToExcel servlet, where a directory-traversal flaw allows remote attackers to del...