Hp Network Automation vulnerabilities
17 vulnerabilities
Known vulnerabilities in Hp Network Automation, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-6493hpnetwork_automation+3
EPSS score2.01%
SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection.CVE-2018-6492hpnetwork_automation+3EPSS score1.55%
Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persistent HTML Injection.CVE-2016-1989hpnetwork_automationEPSS score10.55%
HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-1988.CVE-2016-1988hpnetwork_automationEPSS score10.55%
HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-1989.CVE-2016-4385hpnetwork_automationEPSS score4.36%
The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.CVE-2016-4386hpnetwork_automationEPSS score0.50%
HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.CVE-2016-8511hewlett packard enterprisenetwork automation+1EPSS score15.34%
A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found.CVE-2014-2646hpnetwork_automationEPSS score0.62%
Unspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass intended access restrictions via unknown vectors.CVE-2011-2402hpnetwork_automationEPSS score3.08%
Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2011-2403hpnetwork_automationEPSS score1.97%
SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.CVE-2011-1725hpnetwork_automationEPSS score2.44%
Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors.CVE-2011-4790hpnetwork_automationEPSS score9.00%
Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors.CVE-2017-5812hewlett packard enterprisenetwork automation+1EPSS score5.27%
A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.CVE-2017-5811hewlett packard enterprisenetwork automation+1EPSS score17.02%
A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.CVE-2017-5814hewlett packard enterprisenetwork automation+1EPSS score8.65%
A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.CVE-2017-5813hewlett packard enterprisenetwork automation+1EPSS score1.86%
A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.CVE-2017-5810hewlett packard enterprisenetwork automation+1EPSS score4.69%
A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.