Hp Network Node Manager I vulnerabilities

29 known vulnerabilities affecting hp/network_node_manager_i.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL4HIGH5MEDIUM20

Vulnerabilities

Page 1 of 2

CVE-2016-4398HIGHCVSS 8.8v10.00v10.01+1 more2018-08-06

CVE-2016-4398 [HIGH] CWE-502 CVE-2016-4398: A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i (NNMi) S A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10 using Java Deserialization.

nvd

CVE-2016-4397HIGHCVSS 7.8v10.00v10.10+1 more2018-08-06

CVE-2016-4397 [HIGH] CWE-94 CVE-2016-4397: A local code execution security vulnerability was identified in HP Network Node Manager i (NNMi) v10 A local code execution security vulnerability was identified in HP Network Node Manager i (NNMi) v10.00, v10.10 and v10.20 Software.

nvd

CVE-2016-4399MEDIUMCVSS 5.4v10.00v10.01+1 more2018-08-06

CVE-2016-4399 [MEDIUM] CWE-79 CVE-2016-4399: A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (p A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could result in cross-site scripting (XSS).

nvd

CVE-2016-4400MEDIUMCVSS 5.4v10.00v10.01+1 more2018-08-06

CVE-2016-4400 [MEDIUM] CWE-79 CVE-2016-4400: A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (p A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could result in cross-site scripting (XSS).

nvd

CVE-2017-8948CRITICALCVSS 9.8v10.00v10.01+3 more2018-02-15

CVE-2017-8948 [CRITICAL] CVE-2017-8948: A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software ver A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software versions v10.0x, v10.1x, v10.2x was found.

nvd

CVE-2016-2009HIGHCVSS 8.8v9.20v9.23+4 more2016-05-07

CVE-2016-2009 [HIGH] CWE-284 CVE-2016-2009: HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticat HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

nvd

CVE-2016-2014HIGHCVSS 8.1v9.20v9.23+4 more2016-05-07

CVE-2016-2014 [HIGH] CWE-284 CVE-2016-2014: HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticat HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.

nvd

CVE-2016-2010MEDIUMCVSS 5.4v9.20v9.23+4 more2016-05-07

CVE-2016-2010 [MEDIUM] CWE-79 CVE-2016-2010: Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25 Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2011.

nvd

CVE-2016-2013MEDIUMCVSS 6.5v9.20v9.23+4 more2016-05-07

CVE-2016-2013 [MEDIUM] CWE-200 CVE-2016-2013: HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticat HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors.

nvd

CVE-2016-2012MEDIUMCVSS 6.5v9.20v9.23+4 more2016-05-07

CVE-2016-2012 [MEDIUM] CWE-287 CVE-2016-2012: HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers t HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to bypass authentication via unspecified vectors.

nvd

CVE-2016-2011MEDIUMCVSS 5.4v9.20v9.23+4 more2016-05-07

CVE-2016-2011 [MEDIUM] CVE-2016-2011: Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25 Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2010.

nvd

CVE-2014-2624CRITICALCVSS 10.0PoCv9.0v9.10+1 more2014-09-11

CVE-2014-2624 [CRITICAL] CVE-2014-2624: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote att Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264.

nvd

CVE-2013-6220MEDIUMCVSS 4.3v9.0v9.10+1 more2014-05-10

CVE-2013-6220 [MEDIUM] CWE-79 CVE-2013-6220: Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0, 9.10, and 9.20 all Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0, 9.10, and 9.20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2013-6218CRITICALCVSS 10.0v9.0v9.01+4 more2014-04-19

CVE-2013-6218 [CRITICAL] CVE-2013-6218: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote att Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors.

nvd

CVE-2011-1483MEDIUMCVSS 5.0v9.0v9.01+3 more2013-07-29

CVE-2011-1483 [MEDIUM] CVE-2011-1483: wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 d

nvd

CVE-2013-2351HIGHCVSS 7.5v9.0v9.10+1 more2013-07-13

CVE-2013-2351 [HIGH] CVE-2013-2351: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00, 9.1x, and 9.2x allows remote att Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00, 9.1x, and 9.2x allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.

nvd

CVE-2012-3279MEDIUMCVSS 4.3v8.0v8.10+9 more2013-02-06

CVE-2012-3279 [MEDIUM] CWE-79 CVE-2012-3279: Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9 Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2012-3275CRITICALCVSS 10.0v9.10v9.202012-12-06

CVE-2012-3275 [CRITICAL] CVE-2012-3275: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.1x and 9.20 allows remote attackers Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.1x and 9.20 allows remote attackers to execute arbitrary code via unknown vectors.

nvd

CVE-2012-3267MEDIUMCVSS 5.0v9.202012-10-04

CVE-2012-3267 [MEDIUM] CVE-2012-3267: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.20 allows remote attackers to obtain Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.20 allows remote attackers to obtain sensitive information via unknown vectors.

nvd

CVE-2011-5184MEDIUMCVSS 4.3PoCv9.102012-09-20

CVE-2011-5184 [MEDIUM] CVE-2011-5184: Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote a Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject arbitrary web script or HTML via the (1) node parameter to nnm/mibdiscover; (2) nodename parameter to nnm/protected/configurationpoll.jsp, (3) nnm/protected/ping.jsp, (4) nnm/protected/statuspoll.jsp, or (5) nnm/protected/traceroute.jsp; or (

nvd

1 / 2Next →