Hewlett Packard Enterprise vulnerabilities, page 5
347 vulnerabilities
Known vulnerabilities in Hewlett Packard Enterprise products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 145 products.
CVE-2018-7074hewlett packard enterprisehpe intelligent management center (imc)+1
EPSS score15.02%
A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P07. The vulnerability was resolved in iMC PLAT 7.3 E0605P04 or subsequent version.CVE-2018-7076hewlett packard enterprisehpe intelligence management center (imc) plat+1EPSS score12.31%
A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04.CVE-2018-7104hewlett packard enterprisehpe intelligent management center (imc) wireless services manager software+1EPSS score8.87%
A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02.CVE-2018-7110hewlett packard enterprisehpe service governance framework (sgf)+1EPSS score0.66%
A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework (SGF) version 4.2, 4.3. A race condition under high load in SGF exists where SGF transferred different parameter to the enabler.CVE-2018-7102hewlett packard enterprisehpe intelligent management center (imc) plat+1EPSS score2.85%
A security vulnerability in HPE Intelligent Management Center (iMC) PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification.CVE-2018-7066arubanetworksclearpass_policy_manager+1EPSS score3.48%
An unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked devices. The ClearPass OnConnect feature permits administrators to link other network devices into ClearPass for the purpose of collecting enhanced information about connected endpoints. A defect in the API could allow a remote attacker to execute arbitrary commands on one of the linked devices. This vulnerability is only applicable if credentials for devices have been supplied to ClearPass under Configuration -> Network -> Devices -> CLI Settings. Resolution: Fixed in 6.7.5 and 6.6.10-hotfix.CVE-2018-7114hewlett packard enterprisehpe intelligent management center (imc)+1EPSS score32.76%
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.CVE-2018-7103hewlett packard enterprisehpe intelligent management center (imc) wireless services manager software+1EPSS score8.87%
A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02.CVE-2018-7100hewlett packard enterprisehp 1810-24g, hp 1810-48g, hp 1810-8 v2 switches+3EPSS score0.51%
A potential security vulnerability has been identified in HPE OfficeConnect 1810 Switch Series (HP 1810-24G - P.2.22 and previous versions, HP 1810-48G PK.1.34 and previous versions, HP 1810-8 v2 P.2.22 and previous versions). The vulnerability could allow local disclosure of sensitive information.CVE-2018-7097hewlett packard enterprisehpe 3par service processors+1EPSS score0.74%
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery.CVE-2018-7099hewlett packard enterprisehpe 3par service processors+1EPSS score0.40%
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow disclosure of privileged information.CVE-2016-4398hewlett packard enterprisehp network node manager (nnmi)+1EPSS score5.01%
A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10 using Java Deserialization.CVE-2016-4400hewlett packard enterprisehp network node manager (nnmi)+1EPSS score0.81%
A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could result in cross-site scripting (XSS).CVE-2016-4406hewlett packard enterprisehp integrated lights-out 3 (ilo 3), hpe integrated lights-out 4 (ilo 4)+2EPSS score2.57%
A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44.CVE-2016-4399hewlett packard enterprisehp network node manager (nnmi)+1EPSS score0.81%
A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could result in cross-site scripting (XSS).CVE-2016-4403hewlett packard enterprisehp keyview+1EPSS score12.17%
A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via memory corruption.CVE-2016-4397hewlett packard enterprisehp network node manager (nnmi)+1EPSS score1.04%
A local code execution security vulnerability was identified in HP Network Node Manager i (NNMi) v10.00, v10.10 and v10.20 Software.CVE-2016-4402hewlett packard enterprisehp keyview+1EPSS score14.70%
A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via buffer overflow.CVE-2016-4404hewlett packard enterprisehp keyview+1EPSS score13.23%
A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via a memory allocation issue.CVE-2016-4391hewlett packard enterprisehp arcsight winc connector+1EPSS score18.37%
A remote code execution security vulnerability has been identified in all versions of the HP ArcSight WINC Connector prior to v7.3.0.