Browse CVEs

HIGH 7.5 CVE-2012-2013 Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtai… System Management Homepage after 7.1.0-16 Fix from $1,9502012-06-29 HIGH 10.0 CVE-2012-2561EPSS 9% HP Business Service Management (BSM) 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary … Business Service Management Mitigation only Fix from $1,9502012-05-21 MEDIUM 6.9 CVE-2012-2010 The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM sys… Openvms Mitigation only Fix from $1,6002012-05-18 HIGH 9.0 CVE-2012-2009 Unspecified vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to gain privil… Performance Insight Mitigation only Fix from $1,9502012-05-09 HIGH 7.5 CVE-2012-2007 SQL injection vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote attackers to execute arbitrary S… Performance Insight Mitigation only Fix from $1,9502012-05-09 HIGH 8.3 CVE-2012-2002 Open redirect vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to redirect users to arbitrary web sites and conduct phi… Snmp Agents For Linux after 8.7.0 Fix from $1,9502012-05-02 HIGH 8.3 CVE-2012-2004 Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users … Insight Management Agents after 8.70.0.0 Fix from $1,9502012-05-02 MEDIUM 6.8 CVE-2012-2003 Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attacker… Insight Management Agents after 8.70.0.0 Fix from $1,6002012-05-02 HIGH 7.5 CVE-2012-2000EPSS 8% Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execute arbitr… System Health Application And Command Line Utilities after 8.7.0 Fix from $1,9502012-05-02 MEDIUM 6.8 CVE-2011-3846 Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication o… System Management Homepage Mitigation only Fix from $1,6002012-04-12 HIGH 10.0 CVE-2012-0131EPSS 7% Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service or possibly … Distributed Computing Environment No fix yet Fix from $1,9502012-04-05 HIGH 7.6 CVE-2012-0129EPSS 8% HP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended access restrictions and execute arbitrary code via unspecified v… Onboard Administrator after 3.32 Fix from $1,9502012-04-05 MEDIUM 5.8 CVE-2012-0128 HP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecifi… Onboard Administrator after 3.32 Fix from $1,6002012-04-05 MEDIUM 5.0 CVE-2012-0130 HP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive information via unspecified vectors. Onboard Administrator after 3.32 Fix from $1,6002012-04-05 HIGH 10.0 CVE-2012-0127EPSS 24% Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute arbitrary code via unknown vectors. Performance Manager Mitigation only Fix from $1,9502012-03-31 MEDIUM 5.8 CVE-2012-0126 Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain access to diagnostic information v… Hp Ux Mitigation only Fix from $1,6002012-03-28 HIGH 10.0 CVE-2012-0121EPSS 10% Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to e… Data Protector Express Mitigation only Fix from $1,9502012-03-14 HIGH 10.0 CVE-2012-0122EPSS 10% Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to e… Data Protector Express Mitigation only Fix from $1,9502012-03-14 HIGH 10.0 CVE-2012-0123EPSS 10% Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to e… Data Protector Express Mitigation only Fix from $1,9502012-03-14 HIGH 10.0 CVE-2012-0124EPSS 62% Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to e… Data Protector Express Mitigation only Fix from $1,9502012-03-14 HIGH 10.0 CVE-2011-4791EPSS 9% DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containin… Data Protector Media Operations after 6.11 Fix from $1,9502012-02-03 HIGH 9.3 CVE-2011-4790EPSS 9% Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors. Network Automation No fix yet Fix from $1,9502012-02-02 HIGH 10.0 CVE-2012-0697EPSS 8% HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via uns… Storageworks P2000 G3 Msa Mitigation only Fix from $1,9502012-01-13 HIGH 10.0 CVE-2011-4789EPSS 65% Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary cod… Diagnostics Mitigation only Fix from $1,9502012-01-13 HIGH 7.8 CVE-2011-4788EPSS 5% Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary fi… Storageworks P2000 G3 Msa Fc\/iscsi Dual Combo Controller Lff Array System Mitigation only Fix from $1,9502012-01-13 HIGH 9.3 CVE-2011-4787 A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary progra… Easy Printer Care Software after 2.5 Fix from $1,9502012-01-12 HIGH 9.3 CVE-2011-4786EPSS 41% A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary progra… Easy Printer Care Software after 2.5 Fix from $1,9502012-01-12 HIGH 7.8 CVE-2011-4785 Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 prin… Hp Chaisoe Mitigation only Fix from $1,9502012-01-10 HIGH 10.0 CVE-2011-4163EPSS 8% Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1… Database Archiving Software Mitigation only Fix from $1,9502011-12-29 HIGH 10.0 CVE-2011-4164EPSS 8% Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1… Database Archiving Software No fix yet Fix from $1,9502011-12-29