CVE-2010-4112

CVE-2010-4112 affects HP Insight Management Agents prior to 8.6. The vulnerability enables remote disclosure of the full installation path via an unspecified request. HP and CVSS data indicate a base score of 5.0 (Medium) with network attack vector and no privileges required. Affected versions ar...

CVE-2012-2003

CVE-2012-2003 describes a CSRF vulnerability in HP Insight Management Agents for Windows Server before v9.0.0.0, affecting Windows Server 2003/2008. The security bulletin and HP PS/Patches document the same CVE family and indicate the vulnerability could allow remote attackers to hijack user auth...

CVE-2012-2004

CVE-2012-2004 is an open redirect vulnerability in HP Insight Management Agents for Windows, affecting versions before 9.0.0.0 on Windows Server 2003/2008. The underlying issue allows remote attackers to redirect users to arbitrary sites, enabling phishing via unspecified vectors. Public referenc...

CVE-2012-2006

CVE-2012-2006 applies to HP Insight Management Agents for Windows Server, affected on Windows Server 2003/2008 prior to version 9.0.0.0. The vulnerability allows remote modification of data or denial of service via unknown vectors. HP’s security bulletin HPSBMU02770/SSRT100848 rev.1 notes these i...

CVE-2012-2005

CVE-2012-2005 corresponds to a cross-site scripting (XSS) vulnerability in HP Insight Management Agents for Windows Server, prior to version 9.0.0.0, running on Windows Server 2003/2008. The underlying issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. H...