Browse CVEs

CRITICAL 9.8 CVE-2022-28620 A remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System Solutions; HPE Slingshot; and HPE Cray EX supercomputers… Slingshot Firmware 1.7.2+ Fix from $2,3002022-06-24 HIGH 7.8 CVE-2022-28619 A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager. The vulnerability could allow loca… Control Repository Manager 7.6.14.0+ Fix from $1,9502022-06-24 CRITICAL 9.8 CVE-2022-28618 A command injection security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE… Nimbleos 5.0.10.100 / 5.2.1.500+ Fix from $2,3002022-05-20 HIGH 7.5 CVE-2022-23705 A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage S… Nimbleos 5.0.10.100 / 5.2.1.500+ Fix from $1,9502022-05-09 HIGH 7.5 CVE-2022-23703 A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Se… Nimbleos 5.0.10.100 / 5.2.1.500+ Fix from $1,9502022-04-12 MEDIUM 6.7 CVE-2022-23702 A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally explo… Superdome Flex Server Firmware 1.20.204 / 3.50.58+ Fix from $1,6002022-04-12 HIGH 7.5 CVE-2021-41004 A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0. Aruba Instant On 1930 8g 2sfp Firmware 1.0.7.0+ Fix from $1,9502022-04-12 MEDIUM 6.5 CVE-2021-41005 A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0. Aruba Instant On 1930 8g 2sfp Firmware 1.0.7.0+ Fix from $1,6002022-04-12 HIGH 8.8 CVE-2021-41000 Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Ar… Arubaos Cx after 10.07.0020 Fix from $1,9502022-03-02 HIGH 8.8 CVE-2021-41001 An authenticated remote code execution vulnerability was discovered in the AOS-CX Network Analytics Engine (NAE) in Aruba CX 6200F Switch Series, Aru… Arubaos Cx after 10.09.0002 Fix from $1,9502022-03-02 HIGH 8.1 CVE-2021-41002 Multiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Ar… Arubaos Cx after 10.09.0002 Fix from $1,9502022-03-02 MEDIUM 6.1 CVE-2021-41003 Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Sw… Arubaos Cx after 10.09.0002 Fix from $1,6002022-03-02 MEDIUM 6.1 CVE-2021-29216 A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software upda… Oneview Global Dashboard 2.5+ Fix from $1,6002022-02-24 MEDIUM 6.1 CVE-2021-29217 A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to… Oneview Global Dashboard 2.5+ Fix from $1,6002022-02-24 MEDIUM 5.3 CVE-2022-23701 A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO 4) firmware version(s): Prior… Integrated Lights Out 2.60+ Fix from $1,6002022-02-24 HIGH 7.8 CVE-2021-29219 A potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL Switch Series version: Prior to 5130_EI_7.10.R3507P02.… Flexnetwork 5130 Jg932a Firmware 5130_ei_7.10.r3507p02+ Fix from $1,9502022-02-04 MEDIUM 6.7 CVE-2021-29218 A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0… Agentless Management 1.44.0.0 / 10.96.0.0+ Fix from $1,6002022-02-04 CRITICAL 9.8 CVE-2021-29215 A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component w… Tez 0.9.201907090334-1.noarch+ Fix from $2,3002022-01-18 MEDIUM 6.7 CVE-2021-29213 A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProL… Proliant Microserver Gen10 Plus Firmware 2.52+ Fix from $1,6002021-11-01 MEDIUM 6.1 CVE-2021-26589 A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Si… Superdome Flex Firmware 3.40.106+ Fix from $1,6002021-10-19 CRITICAL 9.8 CVE-2021-26588 A potential security vulnerability has been identified in HPE 3PAR StoreServ, HPE Primera Storage and HPE Alletra 9000 Storage array firmware. An una… 3par Os after 9.4.0 Fix from $2,3002021-10-11 MEDIUM 6.5 CVE-2021-26587 A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce. The vulnerability could be remotely exploited… Storeonce 5200 Firmware after 4.2.3 Fix from $1,6002021-09-27 HIGH 8.1 CVE-2021-33895 ETINET BACKBOX E4.09 and H4.09 mismanages password access control. When a user uses the User ID of the process running BBSV to login to the Backbox U… Backbox H4.09 Firmware Mitigation only Fix from $1,9502021-06-25 MEDIUM 5.5 CVE-2021-26585 A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged infor… Oneview Global Dashboard Mitigation only Fix from $1,6002021-06-24 MEDIUM 6.5 CVE-2021-26581 A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hun… Superdome Flex Server Firmware 3.30.142+ Fix from $1,6002021-04-01 MEDIUM 6.1 CVE-2021-26580 A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site S… Integrated Lights Out Amplifier 1.95+ Fix from $1,6002021-04-01 MEDIUM 5.5 CVE-2021-26579 A security vulnerability in HPE Unified Data Management (UDM) could allow the local disclosure of privileged information (CWE-321: Use of Hard-coded … Unified Data Management Mitigation only Fix from $1,6002021-03-30 HIGH 7.5 CVE-2021-26578 A potential security vulnerability has been identified in HPE Network Orchestrator (NetO) version(s): Prior to 2.5. The vulnerability could be remote… Network Orchestrator 2.5+ Fix from $1,9502021-03-22 HIGH 8.8 CVE-2021-3191 Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AA… Web Viewpoint after 19.08.00 Fix from $1,9502021-02-09 MEDIUM 5.9 CVE-2021-22267 Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AA… Web Viewpoint after 19.08.00 Fix from $1,6002021-02-09