CVE-2013-4810

HP ProCurve Manager (PCM) 3.20/4.0, PCM+ 3.20/4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management are affected. The root cause is a remote code execution vector via a marshalled object to the EJBInvokerServlet or JMXInvokerServlet, enabling an attacker to execute arbitrar...

CVE-2013-4812

CVE-2013-4812 covers a vulnerability in the HP ProCurve Manager SNAC UpdateCertificatesServlet (PCM/PCM+ 3.20/4.0, IDM 4.0) where the fileName argument is not properly validated, enabling remote attackers to upload JSP files and achieve arbitrary code execution via unspecified vectors (ZDI-CAN-17...

CVE-2013-4811

CVE-2013-4811 : A flaw in the HP ProCurve Manager SNAC UpdateDomainControllerServlet allows remote upload of JSP files and arbitrary code execution by manipulating the adCert parameter, affecting PCM 3.20/4.0, PCM+ 3.20/4.0, and IDM 4.0. Public references document a file-upload/path-traversal vul...

CVE-2013-4809

CVE-2013-4809 is a SQL injection vulnerability in HP ProCurve Manager (PCM) 3.20 and 4.0, HP PCM+ 3.20 and 4.0, and HP Identity Driven Manager (IDM) 4.0. The flaw resides in the GetEventsServlet and is exploitable via the sort or dir parameters, potentially enabling remote code execution (reporte...

CVE-2007-4514

CVE-2007-4514 affects HP ProCurve Manager and HP ProCurve Manager Plus, version 2.3 and earlier. The Security Bulletin documents a remote information-disclosure vulnerability allowing unauthorized data access on the ProCurve Manager server (base CVSS 2.0: AV:N/AC:L/Au:N/C:P/I:N/A:N, score 5.0). R...

CVE-2013-4813

CVE-2013-4813 affects HP ProCurve Manager (PCM) and HP PCM+ / IDM 4.0. The flaw resides in the AgentController/Agent servlet and allows remote code execution via HEAD requests, with the issue tracked as ZDI-CAN-1745. Affected software versions are PCM v3.x/v3.20 and v4.0, PCM+ v3.20/v4.0, and IDM...