Operations Manager Security Vulnerabilities and Issues — Operations Manager CVE List

Lucene search

HpOperations Manager

9 matches found

CVE•added 2009/11/24 12:30 a.m.•263 views

CVE-2009-3843

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make req...

10CVSS9.6AI score0.86831EPSS

CVE•added 2014/10/10 1:55 a.m.•199 views

CVE-2014-2648

Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors.

10CVSS7.8AI score0.22349EPSS

CVE•added 2009/12/03 5:30 p.m.•80 views

CVE-2009-4189

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this m...

10CVSS7.5AI score0.86831EPSS

CVE•added 2009/09/08 6:30 p.m.•73 views

CVE-2009-3099

Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a "Remote exploit," as demonstrated by a certain module in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2007-3872. NOTE: a...

10CVSS6.4AI score0.71103EPSS

CVE•added 2014/10/10 1:55 a.m.•47 views

CVE-2014-2649

Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors.

7.5CVSS7.8AI score0.03623EPSS

CVE•added 2010/04/21 2:30 p.m.•43 views

CVE-2010-1033

Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote attackers to execute arbitrary code via a long string argument to the (1) LoadFile or (2) SaveFile method, related to srcvw32.dll and srcvw4.dll.

9.3CVSS7.8AI score0.24699EPSS

CVE•added 2016/01/30 3:59 p.m.•33 views

CVE-2016-1985

HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

10CVSS9.6AI score0.03233EPSS

CVE•added 2016/08/01 2:59 a.m.•31 views

CVE-2016-4373

The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

9.8CVSS9.6AI score0.01835EPSS

CVE•added 2016/09/08 4:59 p.m.•26 views

CVE-2016-4380

Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

5.4CVSS5AI score0.0027EPSS