HP Operations Manager 9.21 for Solaris

CPE Details

HP Operations Manager 9.21 for Solaris
hp
operations_manager
9.21
2016-09-09
16h21 +00:00
2016-09-09
16h21 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:hp:operations_manager:9.21:*:*:*:*:solaris:*:*

Informations

Vendor

hp

Product

operations_manager

Version

9.21

Target Software

solaris

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2016-4380 2016-09-08 14h00 +00:00 Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
5.4
Moyen
CVE-2016-4373 2016-07-31 23h00 +00:00 The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
9.8
Critique
CVE-2009-4189 2009-12-03 17h00 +00:00 HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3099 and CVE-2009-3843.
10