Vulnerabilities

TI-2015-02473 CVE-2015-2802 · GHSA-3fmj-978w-qxm2

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows…

MEDIUM 42

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, whic…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06375 Published 2020-02-04 No fix listed CWE-200

TI-2017-06444 CVE-2017-8952 · GHSA-r79f-f47p-h2gf

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

MEDIUM 41

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04842 Published 2018-02-15 No fix listed CWE-200

TI-2017-06443 CVE-2017-8951 · GHSA-prx7-hfh2-r9mm

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

LOW 35

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00665 Published 2018-02-15 No fix listed CWE-200

TI-2017-06442 CVE-2017-8950 · GHSA-x7gc-h9pg-938q

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

LOW 26

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0065 Published 2018-02-15 No fix listed CWE-200

TI-2017-06441 CVE-2017-8949 · GHSA-pvj5-p9r8-2cr7

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

LOW 26

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00648 Published 2018-02-15 No fix listed

TI-2017-10466 CVE-2017-14349 · GHSA-h3f8-qcmg-jp7m

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows…

MEDIUM 47

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02638 Published 2017-09-29 No fix listed CWE-269

TI-2015-01903 CVE-2015-2120 · GHSA-4p7c-p2rw-3pw7

Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and…

MEDIUM 44

Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka ZDI-CAN-2567.

CVSS 2.0HIGH 8.7 Network Low privileges Interaction — EPSS 0.03526 Published 2015-05-25 No fix listed

TI-2014-06550 CVE-2014-7882 · GHSA-8vfw-3w5p-w5qv

Unspecified vulnerability in HP SiteScope 11.1x and 11.2x allows remote authenticated…

LOW 29

Unspecified vulnerability in HP SiteScope 11.1x and 11.2x allows remote authenticated users to gain privileges via unknown vectors.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01989 Published 2015-02-02 No fix listed CWE-264

TI-2014-02097 CVE-2014-2614 · GHSA-mcv8-6886-g6ph

Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24…

MEDIUM 41

Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24 allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-2140.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0485 Published 2014-07-07 No fix listed CWE-287

TI-2013-05220 CVE-2013-6207 · GHSA-q7cv-vr5h-6j24

Unspecified vulnerability in the loadFileContents function in the SOAP implementation in…

MEDIUM 46

Unspecified vulnerability in the loadFileContents function in the SOAP implementation in HP SiteScope 10.1x, 11.1x, and 11.21 allows remote attackers to read arbitrary files or cause a denial of service via unknown vecto…

CVSS 2.0HIGH 9.4 Network No auth Interaction — EPSS 0.03372 Published 2014-03-11 No fix listed

TI-2013-04243 CVE-2013-4835 · GHSA-w66p-8v74-6j3w

The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows…

HIGH 70

The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-176…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.71003 Published 2013-11-04 No fix listed

TI-2013-02114 CVE-2013-2367 · GHSA-x8p9-cjx3-wx24

Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used…

HIGH 80

Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.68895 Published 2013-07-31 No fix listed

TI-2012-02809 CVE-2012-3264 · GHSA-vgvh-8845-2838

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

MEDIUM 41

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05587 Published 2012-09-25 No fix listed

TI-2012-02808 CVE-2012-3263 · GHSA-7cfh-f685-x5qq

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

MEDIUM 54

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08585 Published 2012-09-25 No fix listed

TI-2012-02807 CVE-2012-3262 · GHSA-fqv9-pqwp-47c7

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

MEDIUM 54

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08585 Published 2012-09-25 No fix listed

TI-2012-02806 CVE-2012-3261 · GHSA-f8f4-fpvr-wchr

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

HIGH 70

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.40225 Published 2012-09-25 No fix listed

TI-2012-02805 CVE-2012-3260 · GHSA-gqhg-9fr6-8j4j

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

HIGH 70

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.40225 Published 2012-09-25 No fix listed

TI-2012-02804 CVE-2012-3259 · GHSA-224f-2jgg-f9vc

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

HIGH 77

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.6022 Published 2012-09-25 No fix listed

TI-2011-02097 CVE-2011-2401 · GHSA-rp88-j665-jvwh

Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote…

MEDIUM 43

Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors.

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.04129 Published 2011-07-29 No fix listed

TI-2011-02096 CVE-2011-2400 · GHSA-6r7x-82r7-jm49

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows…

LOW 26

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03249 Published 2011-07-29 No fix listed CWE-79

TI-2011-01506 CVE-2011-1727 · GHSA-85x6-4jmm-mx7r

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1…

LOW 24

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02127 Published 2011-05-03 No fix listed CWE-79

TI-2011-01505 CVE-2011-1726 · GHSA-v7ff-c7xw-37pw

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1…

LOW 26

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03287 Published 2011-05-03 No fix listed CWE-79

TI-2007-04210 CVE-2007-4350 · GHSA-x3jg-4vr7-jq3q

Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0…

LOW 23

Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01637 Published 2008-10-21 No fix listed CWE-79

Vulnerabilities

Filters