CVE-2014-2628

CVE-2014-2628 concerns HP Enterprise Maps 1, where remote authenticated users can disclose sensitive information via unknown vectors. The vulnerability is documented in HP’s security bulletin HPSBMU03081 rev.1, which specifies that only HP Enterprise Maps v1 is affected and that HP has provided a...

CVE-2014-4669

HP Enterprise Maps 1.00 is affected by CVE-2014-4669: remote authenticated users can read arbitrary files via an XML External Entity (XXE) in a WSDL document containing an external entity declaration combined with an entity reference in the GetQuote operation. Root cause is an XXE in the XML proc...