Network Automation (Hp) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2018-05-22. Vendor: Hp.
CVEs of Network Automation
- CVE-2018-6492 - CVSS 6.1 (medium), 2018-05-22: Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in…
- CVE-2018-6493 - CVSS 8.8 (high), 2018-05-22: SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20,…
- CVE-2017-5812 - CVSS 7.5 (high), 2018-02-15: A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
- CVE-2017-5811 - CVSS 7.5 (high), 2018-02-15: A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
- CVE-2017-5814 - CVSS 9.8 (critical), 2018-02-15: A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
- CVE-2017-5810 - CVSS 9.8 (critical), 2018-02-15: A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
- CVE-2017-5813 - CVSS 6.3 (medium), 2018-02-15: A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
- CVE-2016-8511 - CVSS 9.8 (critical), 2018-02-15: A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02,…
- CVE-2016-4386 - CVSS 7.8 (high), 2016-09-29: HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.
- CVE-2016-4385 - CVSS 7.3 (high), 2016-09-29: The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute…
- CVE-2016-1989 - CVSS 9.8 (critical), 2016-03-15: HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via…
- CVE-2016-1988 - CVSS 9.8 (critical), 2016-03-15: HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via…
- CVE-2014-2646 - CVSS 7.2 (high), 2014-10-10: Unspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass intended access restrictions via unknown vectors.
- CVE-2011-4790 - CVSS 9.3 (critical), 2012-02-02: Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors.
- CVE-2011-2403 - CVSS 6.5 (medium), 2011-08-01: SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via…
- CVE-2011-2402 - CVSS 4.3 (medium), 2011-08-01: Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or…
- CVE-2011-1725 - CVSS 5 (medium), 2011-04-27: Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors.
