Browse high-severity CVEs

Intelligent Management Center HIGH 8.8

CVE-2017-12495EPSS 6%

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in…

Mitigation only

Fix from $1,950 2018-02-15

Matrix Operating Environment MEDIUM 5.4

CVE-2016-8532

A cross site scripting vulnerability in HPE Matrix Operating Environment version 7.6 was found.

No fix yet

Fix from $1,600 2018-02-15

Matrix Operating Environment MEDIUM 5.3

CVE-2016-8531

A remote information disclosure vulnerability in HPE Matrix Operating Environment version 7.6 was found.

No fix yet

Fix from $1,600 2018-02-15

Network Automation CRITICAL 9.8

CVE-2016-8511EPSS 15%

A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v1…

Mitigation only

Fix from $2,300 2018-02-15

Loadrunner CRITICAL 9.8

CVE-2016-8512EPSS 6%

A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found.

Mitigation only

Fix from $2,300 2018-02-15

Diagnostics MEDIUM 6.5

CVE-2016-8521

A Remote click jacking vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.

No fix yet

Fix from $1,600 2018-02-15

Diagnostics MEDIUM 5.4

CVE-2016-8522

A cross-site scripting vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.

No fix yet

Fix from $1,600 2018-02-15

T790 Firmware HIGH 7.8

CVE-2017-2747

HP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790, T795, T1300, T2300, before MRY_04_05_00.5 for DesignJe…

Mitigation only

Fix from $1,950 2018-01-23

Thinpro HIGH 7.8

CVE-2017-2740

A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and …

Mitigation only

Fix from $1,950 2018-01-23

Synaptics Touchpad Driver MEDIUM 5.1

CVE-2017-17556

A debug tool in Synaptics TouchPad drivers allows local users with administrative access to obtain sensitive information about keyboard scan codes by…

Mitigation only

Fix from $1,600 2017-12-15

Content Manager HIGH 7.5

CVE-2017-14360

A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited …

No fix yet

Fix from $1,950 2017-11-08

Performance Center MEDIUM 5.4

CVE-2017-14359

A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to all…

Mitigation only

Fix from $1,600 2017-11-03

Arcsight Enterprise Security Manager CRITICAL 9.8

CVE-2017-14356

An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vul…

Mitigation only

Fix from $2,300 2017-10-31

Arcsight Enterprise Security Manager MEDIUM 6.1

CVE-2017-14357

A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Pa…

Mitigation only

Fix from $1,600 2017-10-31

Arcsight Enterprise Security Manager MEDIUM 6.1

CVE-2017-14358

A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.…

Mitigation only

Fix from $1,600 2017-10-31

Intelligent Management Center Plat CRITICAL 9.8

CVE-2017-5791EPSS 69%

The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authentication via un…

Mitigation only

Fix from $2,300 2017-10-11

Ucmdb Foundation Software HIGH 8.8

CVE-2017-14353

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, cou…

No fix yet

Fix from $1,950 2017-10-05

Ucmdb Foundation Software MEDIUM 6.1

CVE-2017-14354

A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.3…

Mitigation only

Fix from $1,600 2017-10-05

Bsm Platform Application Performance Management System Health CRITICAL 9.8

CVE-2017-13983EPSS 6%

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows rem…

Mitigation only

Fix from $2,300 2017-09-30

Sitescope CRITICAL 9.8

CVE-2017-14349

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and mon…

Mitigation only

Fix from $2,300 2017-09-30

Application Performance Management CRITICAL 9.8

CVE-2017-14350EPSS 7%

A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40. The vulner…

No fix yet

Fix from $2,300 2017-09-30

Ucmdb Configuration Manager CRITICAL 9.8

CVE-2017-14351

A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vul…

No fix yet

Fix from $2,300 2017-09-30

Bsm Platform Application Performance Management System Health HIGH 8.8

CVE-2017-13982

A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows…

Mitigation only

Fix from $1,950 2017-09-30

Arcsight Enterprise Security Manager HIGH 8.1

CVE-2017-13989

An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows …

Mitigation only

Fix from $1,950 2017-09-30

Bsm Platform Application Performance Management System Health MEDIUM 6.5

CVE-2017-13984

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows rem…

Mitigation only