Browse CVEs

MEDIUM 5.1 CVE-2017-17556 A debug tool in Synaptics TouchPad drivers allows local users with administrative access to obtain sensitive information about keyboard scan codes by… Synaptics Touchpad Driver Mitigation only Fix from $1,6002017-12-15 HIGH 7.5 CVE-2017-14360 A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited … Content Manager No fix yet Fix from $1,9502017-11-08 MEDIUM 5.4 CVE-2017-14359 A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to all… Performance Center Mitigation only Fix from $1,6002017-11-03 CRITICAL 9.8 CVE-2017-14356 An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vul… Arcsight Enterprise Security Manager Mitigation only Fix from $2,3002017-10-31 MEDIUM 6.1 CVE-2017-14357 A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Pa… Arcsight Enterprise Security Manager Mitigation only Fix from $1,6002017-10-31 MEDIUM 6.1 CVE-2017-14358 A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.… Arcsight Enterprise Security Manager Mitigation only Fix from $1,6002017-10-31 CRITICAL 9.8 CVE-2017-5789EPSS 18% HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified … Loadrunner after 12.53 Fix from $2,3002017-10-11 CRITICAL 9.8 CVE-2017-5791EPSS 69% The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authentication via un… Intelligent Management Center Plat Mitigation only Fix from $2,3002017-10-11 CRITICAL 9.8 CVE-2017-8994EPSS 10% A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely. Operations Orchestration after 10.70 Fix from $2,3002017-10-10 HIGH 8.8 CVE-2017-14353 A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, cou… Ucmdb Foundation Software No fix yet Fix from $1,9502017-10-05 MEDIUM 6.1 CVE-2017-14354 A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.3… Ucmdb Foundation Software Mitigation only Fix from $1,6002017-10-05 CRITICAL 9.8 CVE-2017-13983EPSS 6% An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows rem… Bsm Platform Application Performance Management System Health Mitigation only Fix from $2,3002017-09-30 CRITICAL 9.8 CVE-2017-14349 An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and mon… Sitescope Mitigation only Fix from $2,3002017-09-30 CRITICAL 9.8 CVE-2017-14350EPSS 7% A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40. The vulner… Application Performance Management No fix yet Fix from $2,3002017-09-30 CRITICAL 9.8 CVE-2017-14351 A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vul… Ucmdb Configuration Manager No fix yet Fix from $2,3002017-09-30 HIGH 8.8 CVE-2017-13982 A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows… Bsm Platform Application Performance Management System Health Mitigation only Fix from $1,9502017-09-30 HIGH 8.1 CVE-2017-13989 An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows … Arcsight Enterprise Security Manager Mitigation only Fix from $1,9502017-09-30 MEDIUM 6.5 CVE-2017-13984 An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows rem… Bsm Platform Application Performance Management System Health Mitigation only Fix from $1,6002017-09-30 MEDIUM 6.5 CVE-2017-13985 An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows rem… Bsm Platform Application Performance Management System Health Mitigation only Fix from $1,6002017-09-30 MEDIUM 6.5 CVE-2017-13987 An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, all… Arcsight Enterprise Security Manager Mitigation only Fix from $1,6002017-09-30 MEDIUM 6.5 CVE-2017-13988 An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows … Arcsight Enterprise Security Manager Mitigation only Fix from $1,6002017-09-30 MEDIUM 6.1 CVE-2017-13986 A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch… Arcsight Enterprise Security Manager Mitigation only Fix from $1,6002017-09-30 MEDIUM 6.1 CVE-2017-14352 A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vul… Ucmdb Configuration Manager Mitigation only Fix from $1,6002017-09-30 MEDIUM 5.3 CVE-2017-13990 An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disc… Arcsight Enterprise Security Manager Mitigation only Fix from $1,6002017-09-30 MEDIUM 5.3 CVE-2017-13991 An information leakage vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows disc… Arcsight Enterprise Security Manager Mitigation only Fix from $1,6002017-09-30 HIGH 8.1 CVE-2015-0839EPSS 6% The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveragin… Linux Imaging And Printing after 3.17.7 Fix from $1,9502017-08-02 HIGH 8.4 CVE-2016-4383 The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated user… Helion Openstack Glance Mitigation only Fix from $1,9502017-06-27 HIGH 7.5 CVE-2015-5436 A potential security vulnerability has been identified with HP Integrated Lights-Out 4 (iLO 4) firmware version 2.11 and later, but prior to version … Integrated Lights Out Firmware 2.30+ Fix from $1,9502017-05-11 HIGH 7.8 CVE-2016-2246 HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended… Thinpro Patch available Fix from $1,9502016-12-29 HIGH 7.5 CVE-2016-4396 HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" … System Management Homepage after 7.5.5.0 Fix from $1,9502016-10-28