Vulnerabilities > HP > Operations Agent > 8.53
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2014-10-19 | CVE-2014-2647 | Cross-Site Scripting vulnerability in HP Operations Agent Cross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager (formerly OpenView Communications Broker) before 11.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2012-07-11 | CVE-2012-2020 | Unspecified vulnerability in HP Operations Agent Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326. | 10.0 |
| 2012-07-11 | CVE-2012-2019 | Unspecified vulnerability in HP Operations Agent Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325. | 10.0 |
| 2011-07-01 | CVE-2011-2608 | Improper Input Validation vulnerability in HP Openview Performance Agent and Operations Agent ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command. | 6.4 |
| 2010-02-09 | CVE-2010-0444 | Credentials Management vulnerability in HP Operations Agent 8.51/8.52/8.53 HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute arbitrary code via unspecified vectors. | 10.0 |