HP Operations Orchestration
11 CVEs affecting HP Operations Orchestration. Latest disclosed: 2018-03-02. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-8519 | Critical | 9.8 | 2018-02-15 | A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to v10.70 was found. |
CVE-2017-8994 | Critical | 9.8 | 2017-10-10 | A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely. |
CVE-2016-1997 | Critical | 9.8 | 2016-03-22 | HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a cra… |
CVE-2018-6490 | Medium | 5.9 | 2018-03-02 | Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x. This vulnerability could be remotely exploited to allow Denial… |
CVE-2015-5451 | | 2015-11-23 | Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authenticati… | |
CVE-2015-2109 | | 2015-03-31 | Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication, and obtain sensitive information or modify data… | |
CVE-2015-2108 | | 2015-03-31 | Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote authenticated users to obtain sensitive informatio… | |
CVE-2013-6192 | | 2013-12-17 | Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified vic… | |
CVE-2013-6191 | | 2013-12-17 | Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbitrary web script or HTML via unspecified… | |
CVE-2012-3258 | | 2012-09-19 | Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors. | |
CVE-2010-3985 | | 2010-10-26 | Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbit… |