Hewlett Packard Enterprise vulnerabilities, page 5
347 vulnerabilities
Known vulnerabilities in Hewlett Packard Enterprise products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 145 products.
CriticalCVE-2018-7074hewlett packard enterprise · hpe intelligent management center (imc) +1 morehewlett packard enterprise hpe intelligent management center (imc)A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P07. The vulnerability was resolved in iMC PLAT 7.3 E0605P04 or subsequent version.EPSS15.02%CriticalCVE-2018-7076hewlett packard enterprise · hpe intelligence management center (imc) plat +1 morehewlett packard enterprise hpe intelligence management center (imc) platA remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04.EPSS12.31%CriticalCVE-2018-7104hewlett packard enterprise · hpe intelligent management center (imc) wireless services manager software +1 morehewlett packard enterprise hpe intelligent management center (imc) wireless services manager softwareA Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02.EPSS8.87%MediumCVE-2018-7110hewlett packard enterprise · hpe service governance framework (sgf) +1 morehewlett packard enterprise hpe service governance framework (sgf)A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework (SGF) version 4.2, 4.3. A race condition under high load in SGF exists where SGF transferred different parameter to the enabler.EPSS0.66%HighCVE-2018-7102hewlett packard enterprise · hpe intelligent management center (imc) plat +1 morehewlett packard enterprise hpe intelligent management center (imc) platA security vulnerability in HPE Intelligent Management Center (iMC) PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification.EPSS2.85%CriticalCVE-2018-7066arubanetworks · clearpass_policy_manager +1 morearubanetworks clearpass_policy_managerAn unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked devices. The ClearPass OnConnect feature permits administrators to link other network devices into ClearPass for the purpose of collecting enhanced information about connected endpoints. A defect in the API could allow a remote attacker to execute arbitrary commands on one of the linked devices. This vulnerability is only applicable if credentials for devices have been supplied to ClearPass under Configuration -> Network -> Devices -> CLI Settings. Resolution: Fixed in 6.7.5 and 6.6.10-hotfix.EPSS3.48%CriticalCVE-2018-7114hewlett packard enterprise · hpe intelligent management center (imc) +1 morehewlett packard enterprise hpe intelligent management center (imc)HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.EPSS32.76%CriticalCVE-2018-7103hewlett packard enterprise · hpe intelligent management center (imc) wireless services manager software +1 morehewlett packard enterprise hpe intelligent management center (imc) wireless services manager softwareA Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02.EPSS8.87%MediumCVE-2018-7100hewlett packard enterprise · hp 1810-24g, hp 1810-48g, hp 1810-8 v2 switches +3 morehewlett packard enterprise hp 1810-24g, hp 1810-48g, hp 1810-8 v2 switchesA potential security vulnerability has been identified in HPE OfficeConnect 1810 Switch Series (HP 1810-24G - P.2.22 and previous versions, HP 1810-48G PK.1.34 and previous versions, HP 1810-8 v2 P.2.22 and previous versions). The vulnerability could allow local disclosure of sensitive information.EPSS0.51%HighCVE-2018-7097hewlett packard enterprise · hpe 3par service processors +1 morehewlett packard enterprise hpe 3par service processorsA security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery.EPSS0.74%MediumCVE-2018-7099hewlett packard enterprise · hpe 3par service processors +1 morehewlett packard enterprise hpe 3par service processorsA security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow disclosure of privileged information.EPSS0.40%HighCVE-2016-4398hewlett packard enterprise · hp network node manager (nnmi) +1 morehewlett packard enterprise hp network node manager (nnmi)A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10 using Java Deserialization.EPSS5.01%MediumCVE-2016-4400hewlett packard enterprise · hp network node manager (nnmi) +1 morehewlett packard enterprise hp network node manager (nnmi)A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could result in cross-site scripting (XSS).EPSS0.81%MediumCVE-2016-4406hewlett packard enterprise · hp integrated lights-out 3 (ilo 3), hpe integrated lights-out 4 (ilo 4) +2 morehewlett packard enterprise hp integrated lights-out 3 (ilo 3), hpe integrated lights-out 4 (ilo 4)A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44.EPSS2.57%MediumCVE-2016-4399hewlett packard enterprise · hp network node manager (nnmi) +1 morehewlett packard enterprise hp network node manager (nnmi)A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could result in cross-site scripting (XSS).EPSS0.81%CriticalCVE-2016-4403hewlett packard enterprise · hp keyview +1 morehewlett packard enterprise hp keyviewA security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via memory corruption.EPSS12.17%HighCVE-2016-4397hewlett packard enterprise · hp network node manager (nnmi) +1 morehewlett packard enterprise hp network node manager (nnmi)A local code execution security vulnerability was identified in HP Network Node Manager i (NNMi) v10.00, v10.10 and v10.20 Software.EPSS1.04%CriticalCVE-2016-4402hewlett packard enterprise · hp keyview +1 morehewlett packard enterprise hp keyviewA security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via buffer overflow.EPSS14.70%CriticalCVE-2016-4404hewlett packard enterprise · hp keyview +1 morehewlett packard enterprise hp keyviewA security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via a memory allocation issue.EPSS13.23%CriticalCVE-2016-4391hewlett packard enterprise · hp arcsight winc connector +1 morehewlett packard enterprise hp arcsight winc connectorA remote code execution security vulnerability has been identified in all versions of the HP ArcSight WINC Connector prior to v7.3.0.EPSS18.37%