RSS   Vulnerabilities for 'Operations agent'   RSS

2017-05-04
 
CVE-2017-3733

CWE-20
 

 
During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.

 
2014-10-18
 
CVE-2014-2647

CWE-79
 

 
Cross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager (formerly OpenView Communications Broker) before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

 
2014-08-12
 
CVE-2014-2630

 

 
Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors.

 
2012-07-11
 
CVE-2012-2020

CWE-noinfo
 

 
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326.

 
 
CVE-2012-2019

CWE-noinfo
 

 
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325.

 
2011-11-23
 
CVE-2011-4160

CWE-noinfo
 

 
Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors.

 
2011-07-01
 
CVE-2011-2608

 

 
ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command.

 
2010-09-08
 
CVE-2010-3005

CWE-noinfo
 

 
Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows local users to gain privileges via unknown vectors.

 
 
CVE-2010-3004

CWE-noinfo
 

 
Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows remote attackers to execute arbitrary code via unknown vectors.

 
2010-02-09
 
CVE-2010-0444

CWE-255
 

 
HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute arbitrary code via unspecified vectors.

 


Copyright 2024, cxsecurity.com

 

Back to Top