Hp Systems Insight Manager vulnerabilities

50 known vulnerabilities affecting hp/systems_insight_manager.

Total CVEs

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL6HIGH19MEDIUM24LOW1

Vulnerabilities

Page 2 of 3

CVE-2015-5404HIGHCVSS 7.5≤ 7.42015-08-27

CVE-2015-5404 [HIGH] CVE-2015-5404: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5 HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote attackers to obtain sensitive information or modify data via unspecified vectors.

nvd

CVE-2015-5402HIGHCVSS 7.2≤ 7.42015-08-27

CVE-2015-5402 [HIGH] CWE-264 CVE-2015-5402: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5 HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows local users to gain privileges, and consequently obtain sensitive information, modify data, or cause a denial of service, via unspecified vectors.

nvd

CVE-2015-2139MEDIUMCVSS 4.0≤ 7.42015-08-27

CVE-2015-2139 [MEDIUM] CWE-200 CVE-2015-2139: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5 HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-5403.

nvd

CVE-2015-5403MEDIUMCVSS 4.0≤ 7.42015-08-27

CVE-2015-5403 [MEDIUM] CVE-2015-5403: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5 HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-2139.

nvd

CVE-2015-2140MEDIUMCVSS 6.5≤ 7.42015-08-27

CVE-2015-2140 [MEDIUM] CWE-20 CVE-2015-2140: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5 HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

nvd

CVE-2015-5405MEDIUMCVSS 6.5≤ 7.42015-08-27

CVE-2015-5405 [MEDIUM] CVE-2015-5405: HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5 HP Systems Insight Manager (SIM) before 7.5.0, as used in HP Matrix Operating Environment before 7.5.0 and other products, allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors.

nvd

CVE-2015-3113CRITICALCVSS 9.8KEVPoCfixed in 7.52015-06-23

CVE-2015-3113 [CRITICAL] CWE-787 CVE-2015-3113: Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.

nvd

CVE-2014-2644MEDIUMCVSS 4.3≤ 7.3v7.0+2 more2014-10-06

CVE-2014-2644 [MEDIUM] CWE-79 CVE-2014-2644: Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remot Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

nvd

CVE-2014-2643MEDIUMCVSS 6.5≤ 7.3v7.0+2 more2014-10-05

CVE-2014-2643 [MEDIUM] CVE-2014-2643: Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote authenticated Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote authenticated users to gain privileges via unknown vectors.

nvd

CVE-2014-2645MEDIUMCVSS 4.3≤ 7.3v7.0+2 more2014-10-05

CVE-2014-2645 [MEDIUM] CWE-20 CVE-2014-2645: HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to conduct clickjacking attacks HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors.

nvd

CVE-2012-1997HIGHCVSS 7.5≤ 6.3v4.0+6 more2013-03-11

CVE-2012-1997 [HIGH] CVE-2012-1997: Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1998.

nvd

CVE-2012-1999HIGHCVSS 8.5≤ 6.3v4.0+6 more2013-03-11

CVE-2012-1999 [HIGH] CVE-2012-1999: Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote authenticated Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors.

nvd

CVE-2012-1998MEDIUMCVSS 6.8≤ 6.3v4.0+6 more2013-03-11

CVE-2012-1998 [MEDIUM] CVE-2012-1998: Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1997.

nvd

CVE-2012-1996MEDIUMCVSS 4.3≤ 6.3v4.0+6 more2013-03-11

CVE-2012-1996 [MEDIUM] CVE-2012-1996: Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to modify data via unknown vectors.

nvd

CVE-2012-1995LOWCVSS 3.2≤ 6.3v4.0+6 more2013-03-11

CVE-2012-1995 [LOW] CVE-2012-1995: Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows local users to obtai Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors.

nvd

CVE-2011-1542MEDIUMCVSS 4.3≤ 6.2v2.5+10 more2011-04-29

CVE-2011-1542 [MEDIUM] CWE-79 CVE-2011-1542: Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remot Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2011-1543MEDIUMCVSS 4.3≤ 6.2v2.5+10 more2011-04-29

CVE-2011-1543 [MEDIUM] CWE-352 CVE-2011-1543: Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allow Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

nvd

CVE-2010-3290MEDIUMCVSS 6.5≤ 6.1v2.5+9 more2010-10-23

CVE-2010-3290 [MEDIUM] CVE-2010-3290: Unspecified vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote authenticated Unspecified vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote authenticated users to gain privileges via unknown vectors.

nvd

CVE-2010-3289MEDIUMCVSS 4.3≤ 6.1v2.5+9 more2010-10-23

CVE-2010-3289 [MEDIUM] CWE-79 CVE-2010-3289: Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remot Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2010-3288MEDIUMCVSS 6.8≤ 6.1v4.0+4 more2010-10-23

CVE-2010-3288 [MEDIUM] CWE-352 CVE-2010-3288: Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allow Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

nvd

← Previous2 / 3Next →