hitachi global link manager vulnerabilities and exploits

(subscribe to this query)

4.6

CVSSv2

HPE XP Storage using Hitachi Global Link Manager (HGLM) has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00.

Hp Xp Storage Hitachi Global Link Manager

5

CVSSv2

Unspecified vulnerability in Hitachi JP1/HiCommand DeviceManager, Global Link Availability Manager, Replication Monitor, Tiered Storage Manager, and Tuning Manager allows local users to obtain authentication information via unspecified vectors.

Hitachi Jp1-hicommand Device Manager 05 10 05 Hitachi Jp1-hicommand Device Manager 05 50 Hitachi Jp1-hicommand Global Link Availability Manager 05 30 Hitachi Jp1-hicommand Global Link Availability Manager 05 40 Hitachi Jp1-hicommand Replication Monitor 05 30 Hitachi Jp1-hicommand Replication Monitor 05 40 Hitachi Jp1-hicommand Device Manager 05 10 02 Hitachi Jp1-hicommand Device Manager 05 10 03 Hitachi Jp1-hicommand Device Manager 05 10 04 Hitachi Jp1-hicommand Global Link Availability Manager 05 10 Hitachi Jp1-hicommand Global Link Availability Manager 05 20 Hitachi Jp1-hicommand Replication Monitor 05 10 Hitachi Jp1-hicommand Replication Monitor 05 20 Hitachi Jp1-hicommand Tiered Storage Manager 05 00 Hitachi Jp1-hicommand Tiered Storage Manager 05 10 Hitachi Jp1-hicommand Tuning Manager 04 00 Hitachi Jp1-hicommand Tuning Manager 05 00 Hitachi Jp1-hicommand Tiered Storage Manager 05 20 Hitachi Jp1-hicommand Tiered Storage Manager 05 30 Hitachi Jp1-hicommand Tuning Manager 05 10 Hitachi Jp1-hicommand Tuning Manager 05 20 Hitachi Jp1-hicommand Device Manager 05 10

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager prior to 20070528 allows remote malicious users to inject arbitrary web script or HTML via the Expect HTTP header...

Hitachi Jp1-hicommand Device Manager 02 30 Hitachi Jp1-hicommand Device Manager 05 00 Hitachi Jp1-hicommand Replication Monitor 04 00 Hitachi Jp1-hicommand Replication Monitor 05 00 Hitachi Jp1-hicommand Tiered Storage Manager 05 00 Hitachi Jp1-hicommand Tiered Storage Manager 05 50 Hitachi Jp1-hicommand Global Link Availability Manager 05 00 Hitachi Jp1-hicommand Tiered Storage Manager 04 30 Hitachi Jp1-hicommand Device Manager 05 10 Hitachi Jp1-hicommand Device Manager 05 50 Hitachi Jp1-hicommand Replication Monitor 05 50 Hitachi Jp1-hicommand Tiered Storage Manager 04 00

4

CVSSv2

A vulnerability in Hitachi Command Suite before 8.6.2-00, Hitachi Automation Director before 8.6.2-00 and Hitachi Infrastructure Analytics Advisor before 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence. Hitachi Command Su...

Hitachi Device Manager Hitachi Compute Systems Manager Hitachi Automation Director Hitachi Tiered Storage Manager Hitachi Replication Manager Hitachi Tuning Manager Hitachi Global Link Manager Hitachi Infrastructure Analytics Advisor

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager prior to 8.1.2-00, and Compute Systems Manager prior to 7.6.1-08 and 8.x prior to 8.1.2-00, as used in Hitachi Command Suite...

Hitachi Device Manager Hitachi Tiered Storage Manager Hitachi Replication Manager Hitachi Global Link Manager Hitachi Compute Systems Manager Hitachi Compute Systems Manager 8.1.1 Hitachi Compute Systems Manager 8.1.0 Hitachi Compute Systems Manager 8.0.0

NA

Expression Language Injection vulnerability in Hitachi Global Link Manager on Windows allows Code Injection.This issue affects Hitachi Global Link Manager: prior to 8.8.7-03.

4.3

CVSSv2

In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server ...

1 EDB exploit1 Github repository

5

CVSSv2

Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixe...

4 Github repositories1 Article

7.5

CVSSv2

FasterXML jackson-databind 2.0.0 up to and including 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Netapp Steelstore Cloud Integrated Storage -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Netapp Oncommand Api Services -Huawei Oceanstor 9000 Firmware V300r006c20 Huawei Oceanstor 9000 Firmware V300r006c20spc100 Huawei Oceanstor 9000 Firmware V300r006c20spc200 Huawei Oceanstor 9000 Firmware V300r006c20spc300 Oracle Global Lifecycle Management Opatch

9 Github repositories

5

CVSSv2

Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fi...

4 Github repositories1 Article

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook