Hp vulnerabilities, page 3
2,284 vulnerabilities
Known vulnerabilities in Hp products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8,619 products.
CVE-2018-7070hewlett packard enterprisehpe centralview fraud risk management+1
EPSS score1.89%
HPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version.CVE-2018-7122hpintelligent_management_centerEPSS score1.74%
A remote disclosure of information vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.CVE-2018-7071hewlett packard enterprisehpe network function virtualization director (nfvd)+1EPSS score0.81%
HPE has identified a remote access to sensitive information vulnerability in HPE Network Function Virtualization Director (NFVD) 4.2.1 prior to gui patch 3.CVE-2018-7072hewlett packard enterprisehpe moonshot provisioning manager+1EPSS score3.11%
A remote bypass of security restrictions vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24.CVE-2018-7125hpintelligent_management_centerEPSS score1.32%
A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.CVE-2018-7112hewlett packard enterprisewindows firmware installer for gen9, gen8, g7,and g6 hpe servers+91EPSS score0.67%
The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which also addressed the original Spectre/Meltdown set of vulnerabilities. At that time, the Windows firmware installer was also updated in the versions of HPE Integrated Lights-Out 2, 3, and 4 (iLO 2, 3, and 4) listed in the security bulletin. The updated HPE Windows firmware installer was released in the system ROM and HPE Integrated Lights-Out (iLO) releases documented in earlier HPE Security Bulletins: HPESBHF03805, HPESBHF03835, HPESBHF03831. Windows-based systems that have already been updated to the system ROM or iLO versions described in these security bulletins require no further action.CVE-2018-7105hewlett packard enterprisehpe integrated lights-out 5 (ilo 5) for hpe gen10 servers, hpe integrated lights-out 4 (ilo 4), hpe integrated lights-out 3 (ilo 3)+3EPSS score4.11%
A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information.CVE-2018-7120hpsynergy_firmware+1EPSS score2.09%
A security vulnerability in the HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy running firmware 5.00.50, which is part of the HPE Synergy Custom SPP 2018.11.20190205, could allow local or remote unauthorized elevation of privilege.CVE-2018-7098hewlett packard enterprisehpe 3par service processors+1EPSS score0.70%
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow directory traversal.CVE-2018-7058hewlett packard enterprisearuba clearpass+1EPSS score3.89%
Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to gain administrator privileges on the system. The vulnerability is exposed only on ClearPass web interfaces, including administrative, guest captive portal, and API. Customers who do not expose ClearPass web interfaces to untrusted users are impacted to a lesser extent.CVE-2018-7078hewlett packard enterprisehpe integrated lights-out 4 (ilo 4), hpe integrated lights-out 5 (ilo 5)+2EPSS score7.03%
A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integrated Lights-Out 5 (iLO 5) earlier than version v1.30.CVE-2018-7074hewlett packard enterprisehpe intelligent management center (imc)+1EPSS score15.02%
A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P07. The vulnerability was resolved in iMC PLAT 7.3 E0605P04 or subsequent version.CVE-2018-7059hparuba_clearpass_policy_managerEPSS score1.11%
Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon" permission could use this vulnerability to obtain cluster credentials which could allow privilege escalation. This vulnerability is only present when authenticated as a user with "mon" permission.CVE-2018-7076hewlett packard enterprisehpe intelligence management center (imc) plat+1EPSS score12.31%
A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04.CVE-2018-7104hewlett packard enterprisehpe intelligent management center (imc) wireless services manager software+1EPSS score8.87%
A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02.CVE-2018-7102hewlett packard enterprisehpe intelligent management center (imc) plat+1EPSS score2.85%
A security vulnerability in HPE Intelligent Management Center (iMC) PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification.CVE-2018-7119hpnonstop_safeguard_j_series+4EPSS score0.32%
A Local Disclosure of Sensitive Information vulnerability was identified in HPE NonStop Safeguard earlier than version SPR T9750L01^AIC or T9750H05^AIH, and later versions when the PASSWORD-PROMPT configuration attribute is not set to BLIND; all versions on H-series. STDSEC-STANDARD SECURITY PROD All prior versions before T6533L01^ADU or T6533H05^ADW, and later versions when the PASSWORD-PROMPT configuration attribute is not set to BLIND and all versions on H-series . Note that some commands in NonStop Safeguard and NonStop Standard Security software require username and password to be passed as command line parameters, which may lead to a local disclosure of the credentials.CVE-2018-7114hewlett packard enterprisehpe intelligent management center (imc)+1EPSS score32.76%
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.CVE-2018-7103hewlett packard enterprisehpe intelligent management center (imc) wireless services manager software+1EPSS score8.87%
A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02.CVE-2018-7100hewlett packard enterprisehp 1810-24g, hp 1810-48g, hp 1810-8 v2 switches+3EPSS score0.51%
A potential security vulnerability has been identified in HPE OfficeConnect 1810 Switch Series (HP 1810-24G - P.2.22 and previous versions, HP 1810-48G PK.1.34 and previous versions, HP 1810-8 v2 P.2.22 and previous versions). The vulnerability could allow local disclosure of sensitive information.