Hp Operations Orchestration vulnerabilities
11 vulnerabilities
Known vulnerabilities in Hp Operations Orchestration, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-6490hpoperations_orchestration+1
EPSS score2.57%
Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x. This vulnerability could be remotely exploited to allow Denial of Service.CVE-2013-6191hpoperations_orchestrationEPSS score2.49%
Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2013-6192hpoperations_orchestrationEPSS score0.97%
Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.CVE-2015-2109hpoperations_orchestrationEPSS score4.08%
Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unknown vectors.CVE-2015-2108hpoperations_orchestrationEPSS score1.93%
Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote authenticated users to obtain sensitive information via unknown vectors.CVE-2015-5451hpoperations_orchestrationEPSS score1.49%
Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.CVE-2016-1997hpoperations_orchestration+1EPSS score6.69%
HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.CVE-2016-8519hewlett packard enterpriseoperations orchestration+1EPSS score27.58%
A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to v10.70 was found.CVE-2012-3258hpoperations_orchestrationEPSS score9.92%
Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors.CVE-2010-3985hpoperations_orchestrationEPSS score2.01%
Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2017-8994hpoperations_orchestration+1EPSS score9.84%
A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely.