GCVE - cpe:2.3:a:hp:power_manager:4.2.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hp:power_manager:4.2.8:*:*:*:*:*:*:*

part: a version: 4.2.8 update: *

Vendor	Hp (`4e2366e1-58ef-5a93-a9f3-b1274f17de1d`)
Product	Power Manager (`3d9456a8-cf18-56c7-838d-ceca4f5ae1d9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-0280`	vulnerable	2026-06-08 04:56:36.424514	Details available Multiple cross-site scripting (XSS) vulnerabilities in HP Power Manager (HPPM) 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the logType parameter to Contents/exportlogs.asp, (2) the Id parameter to Contents/pagehelp.asp, or the (3) SORTORD or (4) SORTCOL parameter to Contents/applicationlogs.asp. NOTE: some of these details are obtained from third party information. Published: 2011-03-14T19:00:00.000Z Updated: 2024-08-06T21:51:07.673Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/66035 http://www.securityfocus.com/bid/46830 http://secunia.com/advisories/43058 http://archives.neohapsis.com/archives/bugtraq/2011-03/0111.html http://archives.neohapsis.com/archives/bugtraq/2011-03/0111.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0277`	vulnerable	2026-06-08 04:56:36.419445	Details available Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts. Published: 2011-02-09T00:00:00.000Z Updated: 2024-08-06T21:51:07.748Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1025032 http://osvdb.org/70836 http://www.securityfocus.com/bid/46258 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02711131 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02711131	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4113`	vulnerable	2026-06-08 04:55:18.969048	Details available Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via a long Login variable to the management web server. Published: 2010-12-22T20:00:00.000Z Updated: 2024-08-07T03:34:37.356Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1024902 http://marc.info/?l=bugtraq&m=129251322532373&w=2 http://www.zerodayinitiative.com/advisories/ZDI-10-292/ http://marc.info/?l=bugtraq&m=129251322532373&w=2 http://secunia.com/advisories/42644	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4000`	vulnerable	2026-06-08 04:51:45.956181	Details available Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter. Published: 2010-01-20T22:00:00.000Z Updated: 2024-09-16T17:09:00.730Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37280 http://secunia.com/secunia_research/2009-48/ http://marc.info/?l=bugtraq&m=126393370331959&w=2 http://securitytracker.com/id?1023470 http://marc.info/?l=bugtraq&m=126393370331959&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Power Manager

Notes

PURL mappings

Vulnerability references

Contribute