Browse CVEs

MEDIUM 5.3 CVE-2017-13990 An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disc… Arcsight Enterprise Security Manager Mitigation only Fix from $1,6002017-09-30 MEDIUM 5.3 CVE-2017-13991 An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disc… Arcsight Enterprise Security Manager Mitigation only Fix from $1,6002017-09-30 HIGH 8.4 CVE-2016-4383 The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated user… Helion Openstack Glance Mitigation only Fix from $1,9502017-06-27 HIGH 8.1 CVE-2016-4390EPSS 5% The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerabilit… Keyview No fix yet Fix from $1,9502016-10-05 HIGH 8.1 CVE-2016-4389EPSS 5% The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerabilit… Keyview Mitigation only Fix from $1,9502016-10-05 HIGH 8.1 CVE-2016-4388EPSS 5% The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerabilit… Keyview Mitigation only Fix from $1,9502016-10-05 HIGH 8.1 CVE-2016-4387EPSS 9% The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerabilit… Keyview Mitigation only Fix from $1,9502016-10-05 HIGH 7.8 CVE-2016-4386 HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors. Network Automation Mitigation only Fix from $1,9502016-09-29 HIGH 7.3 CVE-2016-4385 The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execu… Network Automation Mitigation only Fix from $1,9502016-09-29 HIGH 8.3 CVE-2016-4382 HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restrictions via unspecified vectors, … Performance Center Mitigation only Fix from $1,9502016-09-21 CRITICAL 9.8 CVE-2016-4375 Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware be… Integrated Lights Out 3 Firmware Mitigation only Fix from $2,3002016-09-08 HIGH 8.0 CVE-2016-4371 HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, mo… Service Manager Mitigation only Fix from $1,9502016-06-19 HIGH 8.8 CVE-2016-4369 HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated u… Discovery And Dependency Mapping Inventory Mitigation only Fix from $1,9502016-06-08 CRITICAL 9.8 CVE-2016-4368 HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remo… Universal Cmbd Foundation Mitigation only Fix from $2,3002016-06-08 HIGH 7.5 CVE-2016-4367EPSS 8% The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensitive infor… Universal Cmbd Foundation Mitigation only Fix from $1,9502016-06-08 HIGH 7.5 CVE-2016-4365 HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors. Insight Control Server Deployment No fix yet Fix from $1,9502016-06-08 HIGH 8.4 CVE-2016-4364 HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors. Insight Control Server Deployment No fix yet Fix from $1,9502016-06-08 MEDIUM 6.1 CVE-2016-4363 HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors. Insight Control Server Deployment No fix yet Fix from $1,6002016-06-08 HIGH 8.1 CVE-2016-4362 HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. Insight Control Server Deployment Mitigation only Fix from $1,9502016-06-08 HIGH 7.5 CVE-2016-4361EPSS 8% HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance … Performance Center Mitigation only Fix from $1,9502016-06-08 CRITICAL 9.1 CVE-2016-4360EPSS 9% web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.0… Loadrunner Mitigation only Fix from $2,3002016-06-08 CRITICAL 9.8 CVE-2016-4359EPSS 16% Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 th… Loadrunner Mitigation only Fix from $2,3002016-06-08 HIGH 7.9 CVE-2016-2243 Sure Start on HP Commercial PCs 2015 allows local users to cause a denial of service (BIOS recovery failure) by leveraging administrative access. 700 Series Firmware Mitigation only Fix from $1,9502016-03-04 MEDIUM 5.9 CVE-2016-1987 HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via uns… Hp Ux Ipfilter Mitigation only Fix from $1,6002016-02-18 HIGH 7.2 CVE-2015-6857 Unspecified vulnerability in Virtual Table Server (VTS) in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arb… Loadrunner Mitigation only Fix from $1,9502015-11-26 MEDIUM 5.0 CVE-2015-6029 HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain … Arcsight Logger Mitigation only Fix from $1,6002015-11-04 HIGH 7.8 CVE-2015-5368EPSS 7% The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin C… Hspa\+ Gobi 4g Mitigation only Fix from $1,9502015-08-27 MEDIUM 6.9 CVE-2015-5367 The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin C… Hspa\+ Gobi 4g Mitigation only Fix from $1,6002015-08-27 MEDIUM 6.0 CVE-2015-5408 HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Performance Audi… Centralview Fraud Risk Management Mitigation only Fix from $1,6002015-08-22 MEDIUM 6.0 CVE-2015-5407 HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Performance Audi… Centralview Revenue Leakage Control No fix yet Fix from $1,6002015-08-22