CVE-2016-1998

CVE-2016-1998 affects HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2. The vulnerability arises from deserializing a crafted Java object, related to the Apache Commons Collections library, allowing remote attackers to execute arbitrary commands. Exposure is via network (remot...

CVE-2011-1857

CVE-2011-1857 affects HP Service Manager v7.02, v7.11, v9.20, v9.21 and HP Service Center v6.2.8. The issue allows remote authenticated users to bypass access restrictions via unspecified vectors. The CVSS v2 base score is 8.2 (High) with network access, medium complexity, single authentication, ...

CVE-2013-6202

HP Service Manager CVE-2013-6202 affects versions 9.30–9.33 and involves CSRF that can hijack an authenticated user, with the HP bulletin noting XSS, DoS, and remote arbitrary code execution. The HP Security Bulletin HPSBMU02964 rev.1 confirms affected versions and provides remediation: updates t...

CVE-2011-1859

CVE-2011-1859 affects HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center 6.2.8. The HP Security Bulletin SEC-HP (HPSBMA02674) documents remote disclosure of privileged information and related flaws (including unauthorized remote access) in the Web Tier/Web components, with...

CVE-2013-4808

CVE-2013-4808 affects HP Service Manager (versions 7.11, 9.21, 9.30, 9.31) and HP Service Center 6.2.8. The HP Security Bulletin reports a potential for remote unauthenticated access and elevation of privilege. Base CVSS v2.0 vector is AV:N/AC:L/Au:N/C:P/I:P/A:P with a base score of 7.5. Remediat...

CVE-2013-4844

HP Service Manager (versions 7.11, 9.21, 9.30, 9.31, 9.32) and HP ServiceCenter 6.2.8 are affected by a remote code execution vulnerability (CVE-2013-4844). The HP security bulletin HPSBGN02942 rev.1 indicates the issue could be exploited remotely to execute arbitrary code via unknown vectors, wi...

CVE-2011-1863

CVE-2011-1863 concerns HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center (v6.2.8). The connected documents confirm a remote-authenticated script-injection vulnerability affecting the Web/Web Tier components, with HP’s Security Bulletin detailing multiple related CVEs and ...

CVE-2011-1862

CVE-2011-1862 is an XSS vulnerability in HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center 6.2.8. The underlying issue is a cross-site scripting flaw allowing injection of arbitrary web script/HTML via unspecified vectors. The HP security bulletin HPSBMA02674 rev.1 docume...

CVE-2013-2336

CVE-2013-2336 affects HP Service Manager (versions 7.11, 9.21, 9.30, 9.31) and HP ServiceCenter 6.2.8. The vulnerability enables remote attackers to obtain sensitive information via unspecified vectors. The HP Security Bulletin HPSBMU02884 rev.1 lists two related issues (one being CVE-2013-2336) ...

CVE-2008-4415

CVE-2008-4415 affects HP Service Manager (HPSM) up to version 7.01.71. The HP security bulletin (HPSBMA02385) documents a vulnerability that could allow an attacker to gain extended privileges or execute arbitrary code on authenticated remote access, with a base CVSSv2 score of 9.0 (AV:N/AC:L/Au:...

CVE-2013-6197

HP Service Manager WebTier and Windows Client versions 9.20 and 9.21 are affected by CVE-2013-6197 (before 9.21.661 p8), enabling remote authenticated users to execute arbitrary code via unknown vectors. The HP advisory HPSBMU02959 rev.1 and related HP security bulletin summarize the vulnerabilit...

CVE-2013-6198

HP Service Manager WebTier and Windows Client 9.20 and 9.21 are affected by CVE-2013-6198, a cross-site scripting (XSS) vulnerability with unspecified vectors that could allow remote injection of malicious script or HTML in the context of a logged-in user. Impact is partial integrity compromise t...

CVE-2011-1860

CVE-2011-1860 affects HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center 6.2.8. The vulnerability enables remote attackers to capture HTTP session credentials, via unspecified vectors, with a CVSSv2 base score of 5.0 (Network, Low complexity, no authentication, partial con...

CVE-2013-4832

Summary of CVE-2013-4832 (HP Service Manager) Affected products: HP Service Manager versions 9.30 through 9.32. The vulnerability allows remote authenticated users to obtain sensitive information via unspecified vectors. The issue is documented with a NVD CVSS v2 base score of 4.0 (Medium) and ve...

CVE-2013-4833

HP Service Manager versions 9.30–9.32 contain a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The vulnerability affects HP Service Manager and is associated with HP Security Bulletin HPSBMU02931 rev.2, which n...

CVE-2013-2337

CVE-2013-2337 is an XSS vulnerability in HP Service Manager (versions 7.11, 9.21, 9.30, 9.31) and HP ServiceCenter 6.2.8. It allows remote injection of arbitrary web script/HTML via unspecified vectors, potentially enabling information disclosure. Connected documents confirm affected products and...

CVE-2014-2634

HP Service Manager (SM) exposed vulnerability CVE-2014-2634 affecting SM versions 7.21 and 9.x prior to 9.34. The server component could be accessed in a way that bypasses intended access controls, allowing remote attackers to modify data or cause a denial of service via unspecified vectors. The ...

CVE-2013-4831

HP Service Manager 9.30–9.32 exposes a privilege-management flaw that allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. Root cause: improper privilege handling within these versions. Impact, per sources, is limited to the affected HP Service...

CVE-2011-1861

The CVE-2011-1861 entry concerns HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center 6.2.8. The connected HP security bulletin documents the vulnerabilities as enabling unauthorized remote access and related issues, with CVSS v2 base score 8.3 (high) and impact to confident...

CVE-2011-1858

HP Service Manager and HP Service Center are affected by multiple vulnerabilities including CVE-2011-1858 (Unsecured Local Access) that allow local users to bypass access restrictions. Affected versions: SM 9.21, 9.20, 7.11, 7.02 and SC 6.2.8. The HP Security Bulletin HPSBMA02674 rev.1 documents ...

CVE-2013-6222

CVE-2013-6222 affects HP Service Manager (SM) Mobility Web Client and Service Request Catalog components. The XSS vulnerability exists in SM versions 7.21 and 9.x before 9.34, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The HP security bulletin (HPSBMU03079)...

CVE-2016-2025

Summary: CVE-2016-2025 is an information-disclosure vulnerability in Hewlett Packard Enterprise’s HPE Service Manager, affecting versions 9.30 through 9.41. The issue allows remote attackers to obtain sensitive information via unspecified vectors connected to the Web Client, Service Request Catal...

CVE-2016-4371

CVE-2016-4371 affects HPE Service Manager software versions 9.30–9.41. The vulnerability allows remote authenticated users to obtain sensitive information, modify data, and perform server-side request forgery (SSRF) via unspecified vectors, affecting components such as Server, Web Client, Windows...

CVE-2013-4830

CVE-2013-4830 affects HP Service Manager versions 9.30–9.32, where a remote attacker could execute arbitrary code through an unspecified injection. The issue is documented in HP’s HPSBMU02931 security bulletin, which lists affected software (HP Service Manager v7.11, v9.32, v9.31, v9.30) and prov...

CVE-2014-2632

HP Service Manager CVE-2014-2632 affects the WebTier component across SM 7.21 and SM 9.x up to 9.33, allowing remote code execution via unknown vectors. The HP security bulletin HPSBMU03079 rev.1 documents an increase of privilege and other vulnerabilities impacting WebTier, with CVSSv2 base scor...

CVE-2014-2633

The CVE-2014-2633 issue affects HP Service Manager (SM) Server components in HP SM 7.21 and SM 9.x up to before 9.34. The vulnerability is a Cross-Site Request Forgery (CSRF) that could allow an attacker to hijack user authentication via unspecified vectors. HP’s Security Bulletin HPSBMU03079 rev...