|
264851
|
5.4 |
MEDIUM
Network
|
hp
|
diagnostics
|
A cross-site scripting vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.
|
CWE-79
Cross-site Scripting
|
CVE-2016-8522
|
2024-11-21 11:59 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264852
|
6.5 |
MEDIUM
Network
|
hp
|
diagnostics
|
A Remote click jacking vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.
|
CWE-20
Improper Input Validation
|
CVE-2016-8521
|
2024-11-21 11:59 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264853
|
8.8 |
HIGH
Network
|
eucalyptus
|
eucalyptus
|
HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects and ACLs. In some cases, authenticated users with S3 permissions could also ac…
|
CWE-275
Permission Issues
|
CVE-2016-8520
|
2024-11-21 11:59 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264854
|
9.8 |
CRITICAL
Network
|
hp
|
operations_orchestration
|
A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to v10.70 was found.
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2016-8519
|
2024-11-21 11:59 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264855
|
7.5 |
HIGH
Network
|
hp
|
systems_insight_manager
|
A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.
|
NVD-CWE-noinfo
|
CVE-2016-8518
|
2024-11-21 11:59 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264856
|
6.1 |
MEDIUM
Network
|
hp
|
systems_insight_manager
|
A cross site scripting vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.
|
CWE-79
Cross-site Scripting
|
CVE-2016-8517
|
2024-11-21 11:59 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264857
|
7.5 |
HIGH
Network
|
hp
|
systems_insight_manager
|
A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.
|
NVD-CWE-noinfo
|
CVE-2016-8516
|
2024-11-21 11:59 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264858
|
8.8 |
HIGH
Network
|
hp
|
version_control_repository_manager
|
A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2016-8515
|
2024-11-21 11:59 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264859
|
6.5 |
MEDIUM
Network
|
hp
|
version_control_repository_manager
|
A remote information disclosure in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.
|
CWE-200
Information Exposure
|
CVE-2016-8514
|
2024-11-21 11:59 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264860
|
8.0 |
HIGH
Network
|
hp
|
version_control_repository_manager
|
A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.
|
CWE-352
Origin Validation Error
|
CVE-2016-8513
|
2024-11-21 11:59 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|