CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 1CVE-2011-2403 – HP Network Automation 9.10 - SQL Injection
https://notcve.org/view.php?id=CVE-2011-2403
SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en HP Network Automation v7.2x, v7.5x, v7.6x, v9.0, y v9.10 permite a usuarios autenticados de forma remota ejecutar comandos SQL de su elección a través de vectores desconocidos. • https://www.exploit-db.com/exploits/36000 http://marc.info/?l=bugtraq&m=131188727830971&w=2 http://osvdb.org/74134 http://secunia.com/advisories/45454 http://securityreason.com/securityalert/8321 http://www.securityfocus.com/bid/48924 http://www.securitytracker.com/id?1025862 https://exchange.xforce.ibmcloud.com/vulnerabilities/68886 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0CVE-2011-2402
https://notcve.org/view.php?id=CVE-2011-2402
Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en HP Network Automation v7.2x, v7.5x, v7.6x, v9.0, y v9.10 permite a atacantes remotos inyectar código script web o HTML a través de vectores desconocidos. • http://marc.info/?l=bugtraq&m=131188727830971&w=2 http://osvdb.org/74133 http://secunia.com/advisories/45454 http://securityreason.com/securityalert/8321 http://www.securityfocus.com/bid/48922 http://www.securitytracker.com/id?1025862 https://exchange.xforce.ibmcloud.com/vulnerabilities/68885 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.0EPSS: 0%CPEs: 5EXPL: 0CVE-2011-1725
https://notcve.org/view.php?id=CVE-2011-1725
Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors. Vulnerabilidad no especificada en HP Network Automation v7.2x, v7.5x, v7.6x, v9.0, y v9.10 permite a atacantes remotos obtener información sensible a través de vectores desconocidos. • http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02789514 http://osvdb.org/72049 http://secunia.com/advisories/44304 http://secunia.com/advisories/44319 http://www.securityfocus.com/bid/47550 http://www.securitytracker.com/id?1025435 http://www.vupen.com/english/advisories/2011/1090 https://exchange.xforce.ibmcloud.com/vulnerabilities/67021 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •