
CVE-2020-11861
https://notcve.org/view.php?id=CVE-2020-11861
18 Sep 2020 — Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local privileges and gain root access on the system. Una vulnerabilidad de escalada de privilegios local no autorizada en Micro Focus Operation Agent, que afecta a todas las versiones anteriores a la versión 12.11. La vulnerabilidad podría ser explotada para escalar los privilegios locales y conseguir acceso root e... • https://softwaresupport.softwaregrp.com/doc/KM03709900 •

CVE-2014-2647 – HP Operations Agent - Cross-Site Scripting iFrame Injection
https://notcve.org/view.php?id=CVE-2014-2647
16 Oct 2014 — Cross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager (formerly OpenView Communications Broker) before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en HP Operations Agent en HP Operations Manager (anteriormente OpenView Communications Broker) anterior a 11.14 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados. Potential security vulne... • https://www.exploit-db.com/exploits/35076 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVE-2012-2019 – HP OpenView Performance Agent coda.exe Opcode 0x34 Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2012-2019
11 Jul 2012 — Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325. Vulnerabilidad no especificada en HP Agente de Operaciones antes de 3.11.12 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos, también conocido como ZDI-CAN-1325. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Performance Agent. Authentication is not req... • https://www.exploit-db.com/exploits/22306 •

CVE-2012-2020 – HP OpenView Performance Agent coda.exe Opcode 0x8C Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2012-2020
11 Jul 2012 — Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326. Vulnerabilidad no especificada en HP Operations Agent antes de v3.11.12 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos, también conocido como ZDI-CAN-1326. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Performance Agent. Authentication is not require... • https://www.exploit-db.com/exploits/22305 •

CVE-2010-3004
https://notcve.org/view.php?id=CVE-2010-3004
08 Sep 2010 — Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows remote attackers to execute arbitrary code via unknown vectors. Vulnerabilidad no especificada en HP Operations Agent v7.36 y v8.6 permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos. • http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02497800 •

CVE-2010-3005
https://notcve.org/view.php?id=CVE-2010-3005
08 Sep 2010 — Unspecified vulnerability in HP Operations Agent 7.36 and 8.6 on Windows allows local users to gain privileges via unknown vectors. Vulnerabilidad sin especificar en HP Operations Agent v7.36 y v8.6 para Windows, permite a usuarios locales ganar privilegios a través de vectores desconocidos. • http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02497800 •

CVE-2010-0444
https://notcve.org/view.php?id=CVE-2010-0444
09 Feb 2010 — HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute arbitrary code via unspecified vectors. HP Operations Agent v8.51, v8.52, v8.53, y v8.60 en Solaris v10 utiliza una contraseña en blanco en la cuenta opc_op, lo que permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos. • http://marc.info/?l=bugtraq&m=126566258722040&w=2 • CWE-255: Credentials Management Errors •