Vendor CVEs

Microfocus

All CVEs

2,283 total · sorted by risk

CVE	Vendor / Product	CVSS	EPSS	Published	Description
CVE-2015-5406	Microfocus CentralView Revenue Leakage Control	—	0.02	Aug 22, 2015	HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Performance Audit 2.0 and 2.1; CentralView Credit Risk Control 2.1, 2.2, and 2.3; CentralView Roaming Fraud Control 2.1, 2.2, and 2.3; and…
CVE-2015-2132	Microfocus Operations Manager i	—	0.00	Aug 22, 2015	Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors.
CVE-2015-2134	Microfocus System Management Homepage	—	0.01	Jul 21, 2015	Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
CVE-2015-0795	Microfocus Security Solutions for iSeries	—	0.04	Jul 18, 2015	Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699.
CVE-2015-2126	Microfocus Hpux	—	0.01	Jul 6, 2015	Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions.
CVE-2015-2124	Microfocus Smart Zero Core	—	0.01	Jun 5, 2015	Unspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero Core 4.3 and 4.4 allows local users to bypass intended access restrictions and gain privileges via unknown vectors.
CVE-2015-2123	Microfocus NonStop Safeguard Security Software	—	0.02	May 25, 2015	Unspecified vulnerability in HP NonStop Safeguard Security Software H06.x, L15.02, and J06.x before J06.19 allows remote authenticated users to gain privileges by leveraging Expand access.
CVE-2015-2121	Microfocus Network Virtualization	—	0.03	May 25, 2015	HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController component, aka ZDI-CAN-2569.
CVE-2015-2118	Microfocus Access Control	—	0.01	May 25, 2015	Unspecified vulnerability in the Secure Pull Print and Security Pull Print components in HP Access Control (AC) Software 12.x through 14.x before 14.1.2 allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2015-2122	Microfocus SDN VAN Controller	—	0.03	May 25, 2015	The REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause a denial of service via network traffic to the REST port.
CVE-2015-2120	Microfocus Sitescope	—	0.03	May 25, 2015	Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka ZDI-CAN-2567.
CVE-2015-2115	Microfocus HP Capture and Route Software	—	0.01	Apr 27, 2015	Unspecified vulnerability in HP Capture and Route Software (HPCR) 1.3 before Patch 7, 1.3 FP1 before Patch 1, and 1.4 before Patch 1 allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2015-2116	Microfocus Storage Data Protector	—	0.05	Apr 27, 2015	Unspecified vulnerability in HP Storage Data Protector 7.x before 7.03 build 107 allows remote authenticated users to execute arbitrary code or cause a denial of service via unknown vectors.
CVE-2015-2114	Microfocus Support Solution Framework	—	0.04	Apr 14, 2015	HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors.
CVE-2015-2112	Microfocus Easy Tools	—	0.03	Apr 14, 2015	Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote authenticated users to execute…
CVE-2015-2111	Microfocus Intelligent Provisioning	—	0.01	Apr 4, 2015	Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors.
CVE-2015-2109	Microfocus Operations Orchestration	—	0.04	Mar 31, 2015	Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unknown vectors.
CVE-2015-2108	Microfocus Operations Orchestration	—	0.02	Mar 31, 2015	Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2015-2106	Microfocus Integrated Lights Out 3 Firmware	—	0.04	Mar 31, 2015	Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 allows remote attackers to bypass intended access restrictions or cause a denial of service via unknown vectors.
CVE-2015-2107	Microfocus Operations Manager i Management Pack	—	0.00	Mar 14, 2015	HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges.
CVE-2014-7885	Microfocus ArcSight Enterprise Security Manager	—	0.03	Mar 14, 2015	Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vectors.
CVE-2014-7896	Microfocus Xp P9000 Replication Manager	—	0.02	Mar 3, 2015	Multiple cross-site scripting (XSS) vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Tiered Storage Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Replication…
CVE-2014-7882	Microfocus Sitescope	—	0.02	Feb 2, 2015	Unspecified vulnerability in HP SiteScope 11.1x and 11.2x allows remote authenticated users to gain privileges via unknown vectors.
CVE-2014-7881	Microfocus Insight Control	—	0.02	Jan 15, 2015	Cross-site scripting (XSS) vulnerability in the server in HP Insight Control allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-5217	Microfocus Access Manager	—	0.01	Dec 23, 2014	Cross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.1 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via…
CVE-2014-5215	Microfocus Access Manager	—	0.02	Dec 23, 2014	NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/volsc/monitoring/dev_services.jsp or (2) roma/jsp/debug/debug.jsp.
CVE-2014-5214	Microfocus Access Manager	—	0.02	Dec 23, 2014	nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an XML external entity declaration in conjunction with an…
CVE-2014-7880	Microfocus TCP Ip Services Openvms	—	0.02	Dec 17, 2014	Multiple unspecified vulnerabilities in the POP implementation in HP OpenVMS TCP/IP 5.7 before ECO5 allow remote attackers to cause a denial of service via unspecified vectors.
CVE-2014-7879	Microfocus Hpux	—	0.05	Dec 10, 2014	HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors.
CVE-2014-2608	HPE Smart Update Manager	—	0.00	Dec 10, 2014	Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows local users to obtain sensitive information, and consequently gain privileges, via unknown vectors.
CVE-2014-7875	Microfocus LaserJet CM3530 Multifunction Printer	—	0.05	Nov 4, 2014	Unspecified vulnerability on the HP LaserJet CM3530 Multifunction Printer CC519A and CC520A with firmware before 53.236.2 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
CVE-2014-7877	Microfocus Hpux	—	0.01	Oct 30, 2014	Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors.
CVE-2014-7874	Microfocus System Management Homepage	—	0.02	Oct 19, 2014	Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2014-4661	Microfocus Records Manager	—	0.02	Oct 10, 2014	Cross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-2646	Microfocus Network Automation	—	0.01	Oct 10, 2014	Unspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass intended access restrictions via unknown vectors.
CVE-2014-2644	Microfocus Systems Insight Manager	—	0.03	Oct 6, 2014	Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2014-2645	Microfocus Systems Insight Manager	—	0.02	Oct 5, 2014	HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors.
CVE-2014-2643	Microfocus Systems Insight Manager	—	0.02	Oct 5, 2014	Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote authenticated users to gain privileges via unknown vectors.
CVE-2014-2642	Microfocus System Management Homepage	—	0.02	Oct 2, 2014	HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
CVE-2014-2641	Microfocus System Management Homepage	—	0.01	Oct 2, 2014	Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
CVE-2014-2640	Microfocus System Management Homepage	—	0.04	Oct 2, 2014	Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-2639	Microfocus MPIO Device Specific Module Manager	—	0.01	Sep 28, 2014	Unspecified vulnerability in HP MPIO Device Specific Module Manager before 4.02.00 allows local users to gain privileges via unknown vectors.
CVE-2014-2633	Microfocus Service Manager	—	0.02	Aug 23, 2014	Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2013-6222	Microfocus Service Manager	—	0.03	Aug 23, 2014	Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC) components in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-2629	Microfocus NonStop Safeguard Security Software	—	0.02	Aug 12, 2014	HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors…
CVE-2014-2631	Microfocus Application LifeCycle Management	—	0.01	Aug 12, 2014	Unspecified vulnerability in HP Application Lifecycle Management (aka Quality Center) 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138.
CVE-2014-2628	Microfocus Enterprise Maps	—	0.02	Aug 12, 2014	Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2014-2627	Microfocus NonStop NetBatch	—	0.01	Aug 1, 2014	Unspecified vulnerability in HP NonStop NetBatch G06.14 through G06.32.01, H06 through H06.28, and J06 through J06.17.01 allows remote authenticated users to gain privileges for NetBatch job execution via unknown vectors.
CVE-2013-4840	Microfocus Secbladefw	—	0.03	Jul 28, 2014	Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors.
CVE-2014-2490	Microfocus Hpux	—	0.06	Jul 17, 2014	Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVE-2015-5406Aug 22, 2015
Microfocus
CentralView Revenue Leakage Control
risk 0.00cvss —epss 0.02
HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Performance Audit 2.0 and 2.1; CentralView Credit Risk Control 2.1, 2.2, and 2.3; CentralView Roaming Fraud Control 2.1, 2.2, and 2.3; and…
CVE-2015-2132Aug 22, 2015
Microfocus
Operations Manager i
risk 0.00cvss —epss 0.00
Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors.
CVE-2015-2134Jul 21, 2015
Microfocus
System Management Homepage
risk 0.00cvss —epss 0.01
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
CVE-2015-0795Jul 18, 2015
Microfocus
Security Solutions for iSeries
risk 0.00cvss —epss 0.04
Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699.
CVE-2015-2126Jul 6, 2015
Microfocus
Hpux
risk 0.00cvss —epss 0.01
Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions.
CVE-2015-2124Jun 5, 2015
Microfocus
Smart Zero Core
risk 0.00cvss —epss 0.01
Unspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero Core 4.3 and 4.4 allows local users to bypass intended access restrictions and gain privileges via unknown vectors.
CVE-2015-2123May 25, 2015
Microfocus
NonStop Safeguard Security Software
risk 0.00cvss —epss 0.02
Unspecified vulnerability in HP NonStop Safeguard Security Software H06.x, L15.02, and J06.x before J06.19 allows remote authenticated users to gain privileges by leveraging Expand access.
CVE-2015-2121May 25, 2015
Microfocus
Network Virtualization
risk 0.00cvss —epss 0.03
HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController component, aka ZDI-CAN-2569.
CVE-2015-2118May 25, 2015
Microfocus
Access Control
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Secure Pull Print and Security Pull Print components in HP Access Control (AC) Software 12.x through 14.x before 14.1.2 allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2015-2122May 25, 2015
Microfocus
SDN VAN Controller
risk 0.00cvss —epss 0.03
The REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause a denial of service via network traffic to the REST port.
CVE-2015-2120May 25, 2015
Microfocus
Sitescope
risk 0.00cvss —epss 0.03
Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka ZDI-CAN-2567.
CVE-2015-2115Apr 27, 2015
Microfocus
HP Capture and Route Software
risk 0.00cvss —epss 0.01
Unspecified vulnerability in HP Capture and Route Software (HPCR) 1.3 before Patch 7, 1.3 FP1 before Patch 1, and 1.4 before Patch 1 allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2015-2116Apr 27, 2015
Microfocus
Storage Data Protector
risk 0.00cvss —epss 0.05
Unspecified vulnerability in HP Storage Data Protector 7.x before 7.03 build 107 allows remote authenticated users to execute arbitrary code or cause a denial of service via unknown vectors.
CVE-2015-2114Apr 14, 2015
Microfocus
Support Solution Framework
risk 0.00cvss —epss 0.04
HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors.
CVE-2015-2112Apr 14, 2015
Microfocus
Easy Tools
risk 0.00cvss —epss 0.03
Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote authenticated users to execute…
CVE-2015-2111Apr 4, 2015
Microfocus
Intelligent Provisioning
risk 0.00cvss —epss 0.01
Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors.
CVE-2015-2109Mar 31, 2015
Microfocus
Operations Orchestration
risk 0.00cvss —epss 0.04
Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unknown vectors.
CVE-2015-2108Mar 31, 2015
Microfocus
Operations Orchestration
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2015-2106Mar 31, 2015
Microfocus
Integrated Lights Out 3 Firmware
risk 0.00cvss —epss 0.04
Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 allows remote attackers to bypass intended access restrictions or cause a denial of service via unknown vectors.
CVE-2015-2107Mar 14, 2015
Microfocus
Operations Manager i Management Pack
risk 0.00cvss —epss 0.00
HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges.
CVE-2014-7885Mar 14, 2015
Microfocus
ArcSight Enterprise Security Manager
risk 0.00cvss —epss 0.03
Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vectors.
CVE-2014-7896Mar 3, 2015
Microfocus
Xp P9000 Replication Manager
risk 0.00cvss —epss 0.02
Multiple cross-site scripting (XSS) vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Tiered Storage Manager 6.x through 8.x before 8.1.2-00, HP XP P9000 Replication…
CVE-2014-7882Feb 2, 2015
Microfocus
Sitescope
risk 0.00cvss —epss 0.02
Unspecified vulnerability in HP SiteScope 11.1x and 11.2x allows remote authenticated users to gain privileges via unknown vectors.
CVE-2014-7881Jan 15, 2015
Microfocus
Insight Control
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in the server in HP Insight Control allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-5217Dec 23, 2014
Microfocus
Access Manager
risk 0.00cvss —epss 0.01
Cross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.1 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via…
CVE-2014-5215Dec 23, 2014
Microfocus
Access Manager
risk 0.00cvss —epss 0.02
NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/volsc/monitoring/dev_services.jsp or (2) roma/jsp/debug/debug.jsp.
CVE-2014-5214Dec 23, 2014
Microfocus
Access Manager
risk 0.00cvss —epss 0.02
nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an XML external entity declaration in conjunction with an…
CVE-2014-7880Dec 17, 2014
Microfocus
TCP Ip Services Openvms
risk 0.00cvss —epss 0.02
Multiple unspecified vulnerabilities in the POP implementation in HP OpenVMS TCP/IP 5.7 before ECO5 allow remote attackers to cause a denial of service via unspecified vectors.
CVE-2014-7879Dec 10, 2014
Microfocus
Hpux
risk 0.00cvss —epss 0.05
HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors.
CVE-2014-2608Dec 10, 2014
HPE
Smart Update Manager
risk 0.00cvss —epss 0.00
Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows local users to obtain sensitive information, and consequently gain privileges, via unknown vectors.
CVE-2014-7875Nov 4, 2014
Microfocus
LaserJet CM3530 Multifunction Printer
risk 0.00cvss —epss 0.05
Unspecified vulnerability on the HP LaserJet CM3530 Multifunction Printer CC519A and CC520A with firmware before 53.236.2 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
CVE-2014-7877Oct 30, 2014
Microfocus
Hpux
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors.
CVE-2014-7874Oct 19, 2014
Microfocus
System Management Homepage
risk 0.00cvss —epss 0.02
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2014-4661Oct 10, 2014
Microfocus
Records Manager
risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-2646Oct 10, 2014
Microfocus
Network Automation
risk 0.00cvss —epss 0.01
Unspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass intended access restrictions via unknown vectors.
CVE-2014-2644Oct 6, 2014
Microfocus
Systems Insight Manager
risk 0.00cvss —epss 0.03
Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2014-2645Oct 5, 2014
Microfocus
Systems Insight Manager
risk 0.00cvss —epss 0.02
HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors.
CVE-2014-2643Oct 5, 2014
Microfocus
Systems Insight Manager
risk 0.00cvss —epss 0.02
Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote authenticated users to gain privileges via unknown vectors.
CVE-2014-2642Oct 2, 2014
Microfocus
System Management Homepage
risk 0.00cvss —epss 0.02
HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
CVE-2014-2641Oct 2, 2014
Microfocus
System Management Homepage
risk 0.00cvss —epss 0.01
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
CVE-2014-2640Oct 2, 2014
Microfocus
System Management Homepage
risk 0.00cvss —epss 0.04
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-2639Sep 28, 2014
Microfocus
MPIO Device Specific Module Manager
risk 0.00cvss —epss 0.01
Unspecified vulnerability in HP MPIO Device Specific Module Manager before 4.02.00 allows local users to gain privileges via unknown vectors.
CVE-2014-2633Aug 23, 2014
Microfocus
Service Manager
risk 0.00cvss —epss 0.02
Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2013-6222Aug 23, 2014
Microfocus
Service Manager
risk 0.00cvss —epss 0.03
Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC) components in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-2629Aug 12, 2014
Microfocus
NonStop Safeguard Security Software
risk 0.00cvss —epss 0.02
HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors…
CVE-2014-2631Aug 12, 2014
Microfocus
Application LifeCycle Management
risk 0.00cvss —epss 0.01
Unspecified vulnerability in HP Application Lifecycle Management (aka Quality Center) 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138.
CVE-2014-2628Aug 12, 2014
Microfocus
Enterprise Maps
risk 0.00cvss —epss 0.02
Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2014-2627Aug 1, 2014
Microfocus
NonStop NetBatch
risk 0.00cvss —epss 0.01
Unspecified vulnerability in HP NonStop NetBatch G06.14 through G06.32.01, H06 through H06.28, and J06 through J06.17.01 allows remote authenticated users to gain privileges for NetBatch job execution via unknown vectors.
CVE-2013-4840Jul 28, 2014
Microfocus
Secbladefw
risk 0.00cvss —epss 0.03
Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors.
CVE-2014-2490Jul 17, 2014
Microfocus
Hpux
risk 0.00cvss —epss 0.06
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Page 30 of 46