Vulnerability index

Browse CVEs

1,743 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

System Management Homepage HIGH 7.5
CVE-2012-2013

Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtai…

Fix: after 7.1.0-16
Fix from $1,950 2012-06-29
Business Service Management HIGH 10.0
CVE-2012-2561EPSS 9%

HP Business Service Management (BSM) 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary …

Mitigation only
Fix from $1,950 2012-05-21
Openvms MEDIUM 6.9
CVE-2012-2010

The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM sys…

Mitigation only
Fix from $1,600 2012-05-18
Performance Insight HIGH 9.0
CVE-2012-2009

Unspecified vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to gain privil…

Mitigation only
Fix from $1,950 2012-05-09
Performance Insight HIGH 7.5
CVE-2012-2007

SQL injection vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote attackers to execute arbitrary S…

Mitigation only
Fix from $1,950 2012-05-09
Snmp Agents For Linux HIGH 8.3
CVE-2012-2002

Open redirect vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to redirect users to arbitrary web sites and conduct phi…

Fix: after 8.7.0
Fix from $1,950 2012-05-02
Insight Management Agents HIGH 8.3
CVE-2012-2004

Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users …

Fix: after 8.70.0.0
Fix from $1,950 2012-05-02
Insight Management Agents MEDIUM 6.8
CVE-2012-2003

Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attacker…

Fix: after 8.70.0.0
Fix from $1,600 2012-05-02
System Health Application And Command Line Utilities HIGH 7.5
CVE-2012-2000EPSS 8%

Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execute arbitr…

Fix: after 8.7.0
Fix from $1,950 2012-05-02
System Management Homepage MEDIUM 6.8
CVE-2011-3846

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication o…

Mitigation only
Fix from $1,600 2012-04-12
Distributed Computing Environment HIGH 10.0
CVE-2012-0131EPSS 7%

Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service or possibly …

No fix yet
Fix from $1,950 2012-04-05
Onboard Administrator HIGH 7.6
CVE-2012-0129EPSS 8%

HP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended access restrictions and execute arbitrary code via unspecified v…

Fix: after 3.32
Fix from $1,950 2012-04-05
Onboard Administrator MEDIUM 5.8
CVE-2012-0128

HP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecifi…

Fix: after 3.32
Fix from $1,600 2012-04-05
Onboard Administrator MEDIUM 5.0
CVE-2012-0130

HP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive information via unspecified vectors.

Fix: after 3.32
Fix from $1,600 2012-04-05
Performance Manager HIGH 10.0
CVE-2012-0127EPSS 24%

Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute arbitrary code via unknown vectors.

Mitigation only
Fix from $1,950 2012-03-31
Hp Ux MEDIUM 5.8
CVE-2012-0126

Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain access to diagnostic information v…

Mitigation only
Fix from $1,600 2012-03-28
Data Protector Express HIGH 10.0
CVE-2012-0121EPSS 10%

Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to e…

Mitigation only
Fix from $1,950 2012-03-14
Data Protector Express HIGH 10.0
CVE-2012-0122EPSS 10%

Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to e…

Mitigation only
Fix from $1,950 2012-03-14
Data Protector Express HIGH 10.0
CVE-2012-0123EPSS 10%

Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to e…

Mitigation only
Fix from $1,950 2012-03-14
Data Protector Express HIGH 10.0
CVE-2012-0124EPSS 62%

Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to e…

Mitigation only
Fix from $1,950 2012-03-14
Data Protector Media Operations HIGH 10.0
CVE-2011-4791EPSS 9%

DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containin…

Fix: after 6.11
Fix from $1,950 2012-02-03
Network Automation HIGH 9.3
CVE-2011-4790EPSS 9%

Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors.

No fix yet
Fix from $1,950 2012-02-02
Storageworks P2000 G3 Msa HIGH 10.0
CVE-2012-0697EPSS 8%

HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via uns…

Mitigation only
Fix from $1,950 2012-01-13
Diagnostics HIGH 10.0
CVE-2011-4789EPSS 65%

Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary cod…

Mitigation only
Fix from $1,950 2012-01-13
Storageworks P2000 G3 Msa Fc\/iscsi Dual Combo Controller Lff Array System HIGH 7.8
CVE-2011-4788EPSS 5%

Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary fi…

Mitigation only
Fix from $1,950 2012-01-13
Easy Printer Care Software HIGH 9.3
CVE-2011-4787

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary progra…

Fix: after 2.5
Fix from $1,950 2012-01-12
Easy Printer Care Software HIGH 9.3
CVE-2011-4786EPSS 41%

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary progra…

Fix: after 2.5
Fix from $1,950 2012-01-12
Hp Chaisoe HIGH 7.8
CVE-2011-4785

Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 prin…

Mitigation only
Fix from $1,950 2012-01-10
Database Archiving Software HIGH 10.0
CVE-2011-4163EPSS 8%

Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1…

Mitigation only
Fix from $1,950 2011-12-29
Database Archiving Software HIGH 10.0
CVE-2011-4164EPSS 8%

Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1…

No fix yet
Fix from $1,950 2011-12-29