CVE-2011-3155

HP Onboard Administrator (OA) versions 3.21–3.31 are affected by CVE-2011-3155, a remote unauthorized access vulnerability that could bypass access restrictions via unknown vectors. The NVD entry states a CVSS v2 base score of 6.4 (NETWORK, LOW attack complexity, NONE authentication, partial conf...

CVE-2012-0129

HP Onboard Administrator (OA) before version 3.50 is affected by CVE-2012-0129, which allows remote attackers to bypass access restrictions and execute arbitrary code via unspecified vectors. The issue is documented with a CVSSv2 base score of 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C). Public discussions ...

CVE-2012-0128

HP Onboard Administrator (OA) before version 3.50 is vulnerable to a web-redirect/phishing flaw that could allow remote attackers to redirect users to arbitrary sites via unspecified vectors. The CVE entry (CVE-2012-0128) is documented with a CVSS v2 base score of 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)...

CVE-2012-0130

HP Onboard Administrator (OA) prior to version 3.50 is affected by CVE-2012-0130, which allows remote attackers to obtain sensitive information via unspecified vectors. Related advisories also reference CVE-2012-0128 and CVE-2012-0129 as part of the same OA vulnerability set. CVSS base score for ...

CVE-2020-7132

CVE-2020-7132 corresponds to a Reflected Cross-Site Scripting vulnerability in HPE Onboard Administrator. Connected docs indicate the issue stems from insufficient validation in the web interface, with remediation provided via OA 4.95 (Linux/Windows). Public details mention the vulnerability remo...