Insight Diagnostics Security Vulnerabilities and Issues — Insight Diagnostics CVE List

Lucene search

HpInsight Diagnostics

3 matches found

CVE•added 2013/06/14 1:7 p.m.•51 views

CVE-2013-3574

Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath (aka mount) parameter.

7.8CVSS6.9AI score0.14791EPSS

CVE•added 2013/06/14 1:7 p.m.•36 views

CVE-2013-3573

HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors.

10CVSS7.1AI score0.00905EPSS

CVE•added 2013/06/14 1:7 p.m.•33 views

CVE-2013-3575

hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter.

5CVSS7AI score0.15585EPSS