Browse CVEs

HIGH 8.8 CVE-2020-24628 A remote code injection vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.3. Kvm Ip Console Switch G2 Firmware 2.8.3+ Fix from $1,9502020-10-02 MEDIUM 5.4 CVE-2020-24627 A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.3. Kvm Ip Console Switch G2 Firmware 2.8.3+ Fix from $1,6002020-10-02 CRITICAL 9.8 CVE-2020-24626 Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) … Utility Computing Service Meter Mitigation only Fix from $2,3002020-09-23 HIGH 7.5 CVE-2020-24624 Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Co… Utility Computing Service Meter Mitigation only Fix from $1,9502020-09-23 HIGH 7.5 CVE-2020-24625 Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Comp… Utility Computing Service Meter Mitigation only Fix from $1,9502020-09-23 MEDIUM 6.5 CVE-2020-24623 A potential security vulnerability has been identified in Hewlett Packard Enterprise Universal API Framework. The vulnerability could be remotely exp… Universal Api Framework 2.5.2+ Fix from $1,6002020-09-18 MEDIUM 6.7 CVE-2020-7205 A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vul… Smartstart Scripting Toolkit 1.72 / 2.81+ Fix from $1,6002020-07-30 HIGH 8.8 CVE-2020-7138 Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker … Nimbleos after 5.1.4.100 Fix from $1,9502020-05-19 HIGH 8.1 CVE-2020-7139 Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to acces… Nimbleos after 5.1.4.100 Fix from $1,9502020-05-19 MEDIUM 6.7 CVE-2020-7137 A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or l… Superdome Flex Server Firmware 3.25.46+ Fix from $1,6002020-05-19 CRITICAL 9.8 CVE-2020-7136EPSS 80% A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard Enterprise … Smart Update Manager 8.5.6+ Fix from $2,3002020-04-30 CRITICAL 9.8 CVE-2019-12002 A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE M… Msa 1040 Firmware Mitigation only Fix from $2,3002020-04-17 MEDIUM 6.4 CVE-2019-12001 A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE M… Msa 1040 Firmware Mitigation only Fix from $1,6002020-04-17 MEDIUM 6.9 CVE-2019-11999 Potential security vulnerabilities have been identified in HPE OpenCall Media Platform (OCMP) resulting in remote arbitrary file download and cross s… Opencall Media Platform 4.4.8 / 4.5.2+ Fix from $1,6002020-04-16 MEDIUM 5.5 CVE-2019-11998 HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerabilit… Superdome Flex Server Firmware 3.20.186+ Fix from $1,6002020-01-16 CRITICAL 9.8 CVE-2019-11996 Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities coul… Nimbleos after 5.1.2.0 Fix from $2,3002019-11-07 CRITICAL 9.8 CVE-2019-11988 A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager (SUM) earlier than version 8.3.5. Smart Update Manager 8.3.5+ Fix from $2,3002019-06-05 HIGH 7.8 CVE-2019-11987 A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of privilege. Smart Update Manager 8.4+ Fix from $1,9502019-06-05 MEDIUM 5.9 CVE-2018-7110 A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework (SGF) version 4.2, 4.3. A race condi… Service Governance Framework Mitigation only Fix from $1,6002018-10-17 HIGH 8.8 CVE-2018-7107 A potential security vulnerability has been identified in HPE Device Entitlement Gateway (DEG) v3.2.4, v3.3 and v3.3.1. The vulnerability could be re… Device Entitlement Gateway Mitigation only Fix from $1,9502018-09-27 MEDIUM 5.9 CVE-2018-7108 HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vulnerabili… Storageworks Xp7 Automation Director 8.6.1-00+ Fix from $1,6002018-09-27 MEDIUM 5.5 CVE-2018-7094 A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA). The vulnerability may be exploited locally to a… 3par Service Provider Mitigation only Fix from $1,6002018-08-14 HIGH 7.5 CVE-2017-9003 Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time an… Arubaos Mitigation only Fix from $1,9502018-08-06 CRITICAL 9.8 CVE-2017-5689 KEVEPSS 92% An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and I… Proliant Ml10 Gen9 Server Firmware 6.2.61.3535 / 9.1.41.3024+ Fix from $2,3002017-05-02 HIGH 8.8 CVE-2016-4370 HPE Project and Portfolio Management Center (PPM) 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to execute arbitrary commands or o… Project And Portfolio Management Center Mitigation only Fix from $1,9502016-06-09 HIGH 7.2 CVE-2014-2608 Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows local users t… Smart Update Manager 6.4.1+ Fix from $1,9502014-12-10 MEDIUM 6.4 CVE-2002-0812 Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default S… Compaq Wl310 Firmware Mitigation only Fix from $1,6002002-08-12