CVE-2010-4100

HP Insight Control Performance Management for Windows (before 6.1 update 2) is affected by CVE-2010-4100. The vulnerability enables remote attackers to download/read arbitrary files via unknown vectors. HP’s security bulletin HP HPSBMA02600 (SSRT100239 rev.1) confirms the affected software and st...

CVE-2011-1544

HP Insight Control Performance Management (Windows) before version 6.3 is affected by CVE-2011-1544 (remote authenticated privilege elevation) and CVE-2011-1545 (CSRF). The documented root cause is an unspecified vulnerability that could allow remote authenticated users to gain elevated privilege...

CVE-2011-1545

HP Insight Control Performance Management for Windows is affected by CVE-2011-1545 (CSRF) prior to v6.3. The vulnerability could allow remote attackers to hijack authentication and perform actions with the user’s privileges. The HP security bulletin indicates upgrade to v6.3 or later as the mitig...

CVE-2010-4031

Vulnerability CVE-2010-4031 affects HP Insight Control Performance Management for Windows (before 6.2). The issue allows remote authenticated users to gain privileges via unknown vectors due to an unspecified vulnerability in the affected software’s privilege handling. HP’s security bulletin conf...

CVE-2010-4032

CVE-2010-4032 is a CSRF vulnerability in HP Insight Control Performance Management for Windows, pre-6.2, that could allow remote attackers to hijack user authentication via unknown vectors. The security bulletin indicates HP released v6.2 or later to resolve the issue; apply the update or equival...

CVE-2010-4030

HP Insight Control Performance Management for Windows is affected by CVE-2010-4030 (XSS). The vulnerability exists in versions prior to 6.2 and could allow remote injection of arbitrary script/HTML via unspecified vectors. HP’s security bulletin (HPSBMA02602 rev.1) confirms the issue and states t...