Hp Network Automation
17 CVEs affecting Hp Network Automation. Latest disclosed: 2018-05-22. Critical: 5, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-5814 | Critical | 9.8 | 2018-02-15 | A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. |
CVE-2017-5810 | Critical | 9.8 | 2018-02-15 | A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. |
CVE-2016-8511 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v… |
CVE-2016-1989 | Critical | 9.8 | 2016-03-15 | HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unsp… |
CVE-2016-1988 | Critical | 9.8 | 2016-03-15 | HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unsp… |
CVE-2018-6493 | High | 8.8 | 2018-05-22 | SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10… |
CVE-2016-4386 | High | 7.8 | 2016-09-29 | HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors. |
CVE-2017-5812 | High | 7.5 | 2018-02-15 | A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. |
CVE-2017-5811 | High | 7.5 | 2018-02-15 | A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. |
CVE-2016-4385 | High | 7.3 | 2016-09-29 | The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitra… |
CVE-2017-5813 | Medium | 6.3 | 2018-02-15 | A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. |
CVE-2018-6492 | Medium | 4.7 | 2018-05-22 | Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Netwo… |
CVE-2014-2646 | | 2014-10-10 | Unspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass intended access restrictions via unknown vectors. | |
CVE-2011-4790 | | 2012-02-02 | Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors. | |
CVE-2011-2403 | | 2011-08-01 | SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via un… | |
CVE-2011-2402 | | 2011-08-01 | Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTM… | |
CVE-2011-1725 | | 2011-04-27 | Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors. |