Priority HIGH 79
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.65435 · Published 2014-09-11 · No fix listed
Priority MEDIUM 55
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.1x and 9.20 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10349 · Published 2012-12-06 · No fix listed
Priority MEDIUM 54
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08695 · Published 2014-04-19 · No fix listed
Priority MEDIUM 53
A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software versions v10.0x, v10.1x, v10.2x was found.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07744 · Published 2018-02-15 · No fix listed
Priority MEDIUM 46
A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10 using Java Deserialization.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.05007 · Published 2018-08-06 · No fix listed CWE-502
Priority MEDIUM 42
HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02159 · Published 2016-05-07 · No fix listed CWE-284
Priority LOW 39
HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.
CVSS 3.0HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.02057 · Published 2016-05-07 · No fix listed CWE-284
Priority LOW 39
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00, 9.1x, and 9.2x allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03672 · Published 2013-07-13 · No fix listed
Priority LOW 36
A local code execution security vulnerability was identified in HP Network Node Manager i (NNMi) v10.00, v10.10 and v10.20 Software.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01041 · Published 2018-08-06 · No fix listed CWE-94
Priority LOW 33
HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01847 · Published 2016-05-07 · No fix listed CWE-200
Priority LOW 33
HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to bypass authentication via unspecified vectors.
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0239 · Published 2016-05-07 · No fix listed CWE-287
Priority LOW 32
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x allows remote authenticated users to obtain access to processes via unknown vectors.
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01372 · Published 2011-04-22 · No fix listed
Priority LOW 30
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.20 allows remote attackers to obtain sensitive information via unknown vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04225 · Published 2012-10-04 · No fix listed
Priority LOW 28
wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP0…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02664 · Published 2013-07-28 · Partial fix · 2.1.0.Final CWE-400
Priority LOW 26
A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00814 · Published 2018-08-06 · No fix listed CWE-79
Priority LOW 26
A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00814 · Published 2018-08-06 · No fix listed CWE-79
Priority LOW 26
Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a d…
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00927 · Published 2016-05-07 · No fix listed CWE-79
Priority LOW 26
Cross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a d…
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00927 · Published 2016-05-07 · No fix listed CWE-79
Priority LOW 26
Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.00 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03119 · Published 2011-04-15 · No fix listed CWE-79
Priority LOW 25
Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0, 9.10, and 9.20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02491 · Published 2014-05-10 · No fix listed CWE-79
Priority LOW 25
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02314 · Published 2012-08-07 · No fix listed CWE-79
Priority LOW 25
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject arbitrary web script or HTML via the (1) node parameter to nnm/mibdiscover; (2) nodename parameter to…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02709 · Published 2012-09-20 · No fix listed CWE-79
Priority LOW 24
Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02192 · Published 2011-11-16 · No fix listed CWE-79
Priority LOW 24
Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02192 · Published 2011-11-16 · No fix listed CWE-79
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0163 · Published 2013-02-06 · No fix listed CWE-79
Load more