Vulnerabilities (CVE)

Filtered by vendor Hp Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-2010 1 Hp 1 Network Node Manager I 2016-12-01 3.5 LOW 5.4 MEDIUM
Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2011.
CVE-2016-2023 1 Hp 1 Restful Interface Tool 2016-12-01 2.1 LOW 5.5 MEDIUM
HPE RESTful Interface Tool 1.40 allows local users to obtain sensitive information via unspecified vectors.
CVE-2015-6864 1 Hp 1 Arcsight Logger 2016-12-01 6.5 MEDIUM 6.3 MEDIUM
HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component.
CVE-2016-4380 1 Hp 1 Operations Manager 2016-11-28 3.5 LOW 5.4 MEDIUM
Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-4381 1 Hp 1 Xp7 Command View 2016-11-28 4.4 MEDIUM 4.5 MEDIUM
HPE XP7 Command View Advanced Edition (CVAE) Suite 6.x through 8.x before 8.4.1-02, when Replication Manager (RepMgr) and Device Manager (DevMgr) are enabled, allows local users to bypass intended access restrictions via unspecified vectors.
CVE-2015-5434 1 Hp 87 Jc072b Hp 12500 Main Processing Unit, Jc085a Hp A12518 Switch Chassis, Jc086a Hp A12508 Switch Chassis and 84 more 2016-11-28 6.4 MEDIUM 6.5 MEDIUM
HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding (VRF) hopping."
CVE-2016-4363 1 Hp 1 Insight Control Server Deployment 2016-08-24 4.3 MEDIUM 6.1 MEDIUM
HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors.