NA
Product
Network Automation
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 5Medium 2Low 0
Watch
Add Network Automation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5814 | 9.8 | Feb 15 | A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found Affected: 9.10; 9.20; 9.22; 9.22.01; 9.22.02; 10.00; +5 more |
| CVE-2017-5810 | 9.8 | Feb 15 | A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found Affected: 9.10; 9.20; 9.22; 9.22.01; 9.22.02; 10.00; +5 more |
| CVE-2016-8511 | 9.8 | Feb 15 | A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11,… Affected: 9.10; 9.20; 9.22; 9.22.01; 9.22.02; 10.00; +6 more |
| CVE-2016-1989 | 9.8 | Mar 15 | HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a… Affected: 9.22; 9.22.01; 9.22.02; 10.00; 10.00.01 |
| CVE-2016-1988 | 9.8 | Mar 15 | HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a… Affected: 9.22; 9.22.01; 9.22.02; 10.00; 10.00.01 |
| CVE-2018-6493 | 8.8 | May 22 | SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50 Affected: 10.00; 10.10; 10.11; 10.20; 10.30; 10.40; +1 more |
| CVE-2016-4386 | 7.8 | Sep 29 | HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors Affected: 10.10 |
| CVE-2017-5812 | 7.5 | Feb 15 | A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found Affected: 9.10; 9.20; 9.22; 9.22.01; 9.22.02; 10.00; +5 more |
| CVE-2017-5811 | 7.5 | Feb 15 | A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found Affected: 9.10; 9.20; 9.22; 9.22.01; 9.22.02; 10.00; +5 more |
| CVE-2016-4385 | 7.3 | Sep 29 | The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a… Affected: 9.10; 9.20; 9.22; 9.22.01; 9.22.02; 10.00; +4 more |
| CVE-2017-5813 | 6.3 | Feb 15 | A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found Affected: 9.10; 9.20; 9.22; 9.22.01; 9.22.02; 10.00; +5 more |
| CVE-2018-6492 | 6.1 | May 22 | Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation,… Affected: 10.00; 10.10; 10.11; 10.20; 10.30; 10.40; +1 more |
| CVE-2014-2646 | – | Oct 10 | Unspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass intended access restrictions via unknown vectors Affected: 9.10; 9.20 |
| CVE-2011-4790 | – | Feb 2 | Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors Affected: 7.5; 7.6; 9.0; 9.10 |
| CVE-2011-2403 | – | Aug 1 | SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors Affected: 7.2; 7.5; 7.6; 9.0; 9.10 |
| CVE-2011-2402 | – | Aug 1 | Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: 7.2; 7.5; 7.6; 9.0; 9.10 |
| CVE-2011-1725 | – | Apr 27 | Unspecified vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to obtain sensitive information via unknown vectors Affected: 7.2; 7.5; 7.6; 9.0; 9.10 |
Showing 17
