Hp vulnerabilities, page 2

2,284 vulnerabilities

Known vulnerabilities in Hp products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8,619 products.

10CVE-2018-7121hpintelligent_management_center
EPSS score
7.63%
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
7.5CVE-2018-7077hewlett packard enterprisehpe xp p9000 command view advanced edition (cvae)+2
EPSS score
2.45%
A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), Configuration Manager (CM 8.5.0-00 and prior to 8.6.0-00) could be exploited to allow local and remote unauthorized access to sensitive information.
7.5CVE-2018-7116hewlett packard enterprisehpe intelligent management center (imc)+1
EPSS score
10.30%
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.
7.8CVE-2018-7118hpservice_pack_for_proliant
EPSS score
0.50%
A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software earlier than version 2018.09.0.
7.5CVE-2018-7069hewlett packard enterprisehpe centralview fraud risk management+1
EPSS score
1.80%
HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version.
6.5CVE-2018-7109hewlett packard enterprisehpe enhanced internet usage manager (eium)+1
EPSS score
1.00%
HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager (eIUM) v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM.
6.1CVE-2018-7075hewlett packard enterprisehpe intelligent management center (imc)+1
EPSS score
0.97%
A remote cross-site scripting (XSS) vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT version v7.3 (E0506). The vulnerability is fixed in Intelligent Management Center PLAT 7.3 E0605P04 or subsequent version.
10CVE-2018-7124hpintelligent_management_center
EPSS score
8.04%
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
7.5CVE-2018-7101hewlett packard enterprisehpe integrated lights-out 5 (ilo 5) for hpe gen10 servers, hpe integrated lights-out 4 (ilo 4)+2
EPSS score
7.15%
A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30.
9.8CVE-2018-7096hewlett packard enterprisehpe 3par service processors+1
EPSS score
3.26%
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow code execution.
5.3CVE-2018-7115hewlett packard enterprisehpe intelligent management center (imc)+1
EPSS score
13.36%
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in dbman.exe opcode 10001 on Windows. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.
5.3CVE-2018-7111hewlett packard enterprisehpe uiot+1
EPSS score
5.27%
A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users.
7.5CVE-2018-7092hewlett packard enterprisehpe intelligent management center platform (imc plat)+1
EPSS score
24.21%
A potential security vulnerability has been identified in HPE Intelligent Management Center Platform (IMC Plat) 7.3 E0506P09. The vulnerability could be remotely exploited to allow for remote directory traversal leading to arbitrary file deletion.
6.1CVE-2018-7117hpintegrated_lights-out_5_firmware
EPSS score
1.29%
A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version v1.40.
6.1CVE-2018-7090hewlett packard enterprisehpe xp p9000 command view advanced edition software (cvae) versions 7.0.0-00 to earlier than 8.60-00+1
EPSS score
0.92%
HPE XP P9000 Command View Advanced Edition Software (CVAE) has local and remote cross site scripting vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr.
6.1CVE-2018-7091hewlett packard enterprisehpe xp p9000 command view advanced edition software (cvae)+1
EPSS score
0.92%
HPE XP P9000 Command View Advanced Edition Software (CVAE) has open URL redirection vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr.
8.6CVE-2018-7093hewlett packard enterpriseilo 5 for hpe gen10 servers, ilo 4, ilo 3, moonshot chassis management firmware, moonshot component packs for hpe proliant m510 and m710x server cartridges+5
EPSS score
3.08%
A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to v1.58, and Moonshot Component Pack prior to v2.55 could be remotely exploited to create a denial of service.
6.1CVE-2018-7068hewlett packard enterprisehpe centralview fraud risk management+1
EPSS score
0.97%
HPE has identified a remote HOST header attack vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version.
7.2CVE-2018-7113hewlett packard enterprisehpe integrated lights-out 5 (ilo 5) for hpe gen10 servers+1
EPSS score
0.74%
A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the security restrictions for firmware updates.
7.8CVE-2018-7123hpintelligent_management_center
EPSS score
57.69%
A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.