Vulnerabilities (CVE)

Filtered by vendor Hp Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0961 1 Hp 1 Hp-ux 2016-10-18 6.2 MEDIUM N/A
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
CVE-2016-2024 1 Hp 2 Insight Contol, Server Migration Package 2016-08-24 7.5 HIGH 9.8 CRITICAL
HPE Insight Control before 7.5.1 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors.
CVE-2016-2017 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-24 5.5 MEDIUM 8.1 HIGH
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030.
CVE-2016-2018 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-24 6.4 MEDIUM 9.1 CRITICAL
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
CVE-2016-2019 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-24 7.7 HIGH 8.1 HIGH
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2020, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030.
CVE-2016-2020 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-24 8.5 HIGH 8.1 HIGH
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030.
CVE-2016-2021 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-24 7.7 HIGH 8.1 HIGH
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2022, and CVE-2016-2030.
CVE-2016-2022 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-24 4.7 MEDIUM 8.1 HIGH
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2030.
CVE-2016-4362 1 Hp 1 Insight Control Server Deployment 2016-08-24 5.5 MEDIUM 8.1 HIGH
HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
CVE-2016-2030 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-24 5.5 MEDIUM 8.1 HIGH
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2022.
CVE-2016-4369 1 Hp 1 Discovery And Dependency Mapping Inventory 2016-08-24 6.5 MEDIUM 8.8 HIGH
HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
CVE-2016-4367 1 Hp 1 Universal Cmbd Foundation 2016-08-24 5.0 MEDIUM 7.5 HIGH
The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2016-4365 1 Hp 1 Insight Control Server Deployment 2016-08-24 5.0 MEDIUM 7.5 HIGH
HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2016-4364 1 Hp 1 Insight Control Server Deployment 2016-08-24 7.2 HIGH 8.4 HIGH
HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors.
CVE-2016-4363 1 Hp 1 Insight Control Server Deployment 2016-08-24 4.3 MEDIUM 6.1 MEDIUM
HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors.
CVE-2016-4357 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-23 7.5 HIGH 8.1 HIGH
HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2028.
CVE-2016-4358 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-23 4.8 MEDIUM 8.1 HIGH
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2029.
CVE-2016-2029 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-23 6.4 MEDIUM 9.1 CRITICAL
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4358.
CVE-2016-2028 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-23 5.5 MEDIUM 8.1 HIGH
HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4357.
CVE-2016-2027 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-23 5.0 MEDIUM 7.5 HIGH
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2026.
CVE-2016-2026 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2016-08-23 5.0 MEDIUM 7.5 HIGH
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2027.
CVE-2011-1534 1 Hp 1 Network Node Manager I 2016-08-23 6.5 MEDIUM N/A
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x allows remote authenticated users to obtain access to processes via unknown vectors.
CVE-2011-0923 1 Hp 1 Data Protector 2016-08-23 10.0 HIGH N/A
The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."
CVE-2011-0921 1 Hp 1 Data Protector 2016-08-23 10.0 HIGH N/A
crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the applet domain, and the java username.
CVE-2016-4368 1 Hp 3 Universal Cmbd Configuration Manager, Universal Cmbd Foundation, Universal Discovery 2016-06-10 7.5 HIGH 9.8 CRITICAL
HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
CVE-2016-2245 1 Hp 1 Support Assistant 2016-03-22 10.0 HIGH 9.8 CRITICAL
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors.
CVE-2014-4669 1 Hp 1 Enterprise Maps 2015-12-18 3.5 LOW N/A
HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity (XXE) issue.
CVE-2015-5444 1 Hp 1 Smart Profile Server Data Analytics Layer 2015-10-19 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in HP Smart Profile Server Data Analytics Layer (SPS DAL) 2.3 before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-5443 1 Hp 1 3par Service Processor Sp 2015-10-13 4.0 MEDIUM N/A
HP 3PAR Service Processor SP 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC, and SP 4.3.0-GA-24 (MU1) SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVE-2015-2136 1 Hp 1 Arcsight Logger 2015-09-17 4.0 MEDIUM N/A
HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors.
CVE-2015-2135 1 Hp 1 Intelligent Provisioning 2015-09-01 10.0 HIGH N/A
Unspecified vulnerability in HP Intelligent Provisioning 1.00 through 1.62(a), 2.00, and 2.10 allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2015-5433 1 Hp 2 Matrix Operating Environment, Virtual Connect Enterprise Manager Sdk 2015-08-27 4.0 MEDIUM N/A
HP Virtual Connect Enterprise Manager (VCEM) SDK before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVE-2015-5429 1 Hp 1 Matrix Operating Environment 2015-08-27 7.5 HIGH N/A
HP Matrix Operating Environment before 7.5.0 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2015-5427 and CVE-2015-5428.
CVE-2015-5432 1 Hp 2 Matrix Operating Environment, Virtual Connect Enterprise Manager Sdk 2015-08-27 7.5 HIGH N/A
HP Virtual Connect Enterprise Manager (VCEM) SDK before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
CVE-2015-5431 1 Hp 1 Matrix Operating Environment 2015-08-27 6.5 MEDIUM N/A
HP Matrix Operating Environment before 7.5.0 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
CVE-2015-5430 1 Hp 1 Matrix Operating Environment 2015-08-27 5.0 MEDIUM N/A
HP Matrix Operating Environment before 7.5.0 allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2015-5427 1 Hp 1 Matrix Operating Environment 2015-08-27 7.5 HIGH N/A
HP Matrix Operating Environment before 7.5.0 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2015-5428 and CVE-2015-5429.
CVE-2015-5428 1 Hp 1 Matrix Operating Environment 2015-08-27 7.5 HIGH N/A
HP Matrix Operating Environment before 7.5.0 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2015-5427 and CVE-2015-5429.
CVE-2015-5405 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2015-08-27 6.5 MEDIUM N/A
HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors.
CVE-2015-5404 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2015-08-27 7.5 HIGH N/A
HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
CVE-2015-5402 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2015-08-27 7.2 HIGH N/A
HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows local users to gain privileges, and consequently obtain sensitive information, modify data, or cause a denial of service, via unspecified vectors.
CVE-2015-5403 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2015-08-27 4.0 MEDIUM N/A
HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-2139.
CVE-2015-2140 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2015-08-27 6.5 MEDIUM N/A
HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
CVE-2015-2139 1 Hp 2 Matrix Operating Environment, Systems Insight Manager 2015-08-27 4.0 MEDIUM N/A
HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-5403.
CVE-2015-2132 1 Hp 1 Operations Manager I 2015-08-24 4.4 MEDIUM N/A
Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors.
CVE-2011-2406 1 Hp 1 Openview Performance Insight 2015-03-18 3.5 LOW N/A
Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-7896 1 Hp 4 Xp7 Global Link Manager Software, Xp P9000 Device Manager, Xp P9000 Replication Manager and 1 more 2015-03-12 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Tiered Storage Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Replication Manager 6.x and 7.x before 7.6.1-06, and HP XP7 Global Link Manager Software (aka HGLM) 6.x through 8.x before 8.1.2-00, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-5160 1 Hp 1 Data Protector 2014-08-01 6.4 MEDIUM N/A
** DISPUTED ** Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. NOTE: the vendor reportedly asserts that this behavior is "by design."
CVE-2014-2612 3 Hp, Linux, Microsoft 3 Release Control, Linux Kernel, Windows 2014-07-24 4.0 MEDIUM N/A
Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2014-2613 3 Hp, Linux, Microsoft 3 Release Control, Linux Kernel, Windows 2014-07-24 9.0 HIGH N/A
Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to gain privileges via unknown vectors.