CVE-2016-4382

HIGH Year: 2016
CVSS v3 Score
8.3
High
CVSS v2 Score
6.0
Medium
Weakness Type
CWE-264
View all →

Vulnerability Description

HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to a "remote user validation failure" issue.

Related Vulnerabilities

CVE-2016-5573

HIGH
CVSS:8.3(High)

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspo...

CWE-2642016

CVE-2013-1340

HIGH
CVSS:8.4(High)

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012...

CWE-2642013

CVE-2015-6850

HIGH
CVSS:8.4(High)

EMC VPLEX GeoSynchrony 5.4 SP1 before P3 and 5.5 before Patch 1 has a default password for the root account, which allows local users to gain privileges by leveraging a login session.

CWE-2642015

CVE-2015-6860

HIGH
CVSS:8.4(High)

HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859.

CWE-2642015

CVE-2015-7430

HIGH
CVSS:8.4(High)

The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System (GPFS) allows local users to read or write to arbitrary GPFS data via unspecifi...

CWE-2642015

CVE-2015-8612

HIGH
CVSS:8.4(High)

The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcp_handler argument.

CWE-2642015