Hpe vulnerabilities
279 vulnerabilities
Known vulnerabilities in Hpe products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 198 products.
Products
50 of 198- Arubaos Cx57 vulnerabilities
- Edgeconnect Operating System38 vulnerabilities
- Integrated Lights Out 517 vulnerabilities
- Cloudline Cl3100 Gen10 Server16 vulnerabilities
- Cloudline Cl4100 Gen10 Server16 vulnerabilities
- Cloudline Cl5200 Gen9 Server16 vulnerabilities
- Cloudline Cl5800 Gen10 Server16 vulnerabilities
- Cloudline Cl5800 Gen9 Server16 vulnerabilities
- Baseboard Management Controller14 vulnerabilities
- Insight Remote Support9 vulnerabilities
- Autopass License Server8 vulnerabilities
- Storeonce System8 vulnerabilities
- Hpux Ntp7 vulnerabilities
- Nimbleos6 vulnerabilities
- Oneview Global Dashboard6 vulnerabilities
- Aruba Networking Private 5G Core5 vulnerabilities
- Superdome Flex Server5 vulnerabilities
- HPE System Management Homepage Before V7.64 vulnerabilities
- Smart Update Manager4 vulnerabilities
- Arubaos Switch3 vulnerabilities
- Hf203 vulnerabilities
- Hf20C3 vulnerabilities
- Hf20H3 vulnerabilities
- Hf403 vulnerabilities
- Hf40C3 vulnerabilities
- Hf603 vulnerabilities
- Hf60C3 vulnerabilities
- Integrated Lights Out 63 vulnerabilities
- Oneview3 vulnerabilities
- Serviceguard For Linux3 vulnerabilities
- Sf1003 vulnerabilities
- Sf3003 vulnerabilities
- Utility Computing Service Meter3 vulnerabilities
- Apollo 4200 Gen10 Server2 vulnerabilities
- Apollo 4200 Gen9 Server2 vulnerabilities
- Aruba Instant On 1930 24G 4Sfp\/Sfp\+2 vulnerabilities
- Aruba Instant On 1930 24G Class4 Poe 4Sfp\/Sfp\+ 195W2 vulnerabilities
- Aruba Instant On 1930 24G Class4 Poe 4Sfp\/Sfp\+ 370W2 vulnerabilities
- Aruba Instant On 1930 48G 4Sfp\/Sfp\+2 vulnerabilities
- Aruba Instant On 1930 48G Class4 Poe 4Sfp\/Sfp\+ 370W2 vulnerabilities
- Aruba Instant On 1930 8G 2Sfp2 vulnerabilities
- Aruba Instant On 1930 8G Class4 Poe 2Sfp 124W2 vulnerabilities
- Integrated Lights Out2 vulnerabilities
- Intelligent Provisioning2 vulnerabilities
- Kvm Ip Console Switch G22 vulnerabilities
- Msa 10402 vulnerabilities
- Msa 10502 vulnerabilities
- Msa 20402 vulnerabilities
- Msa 20422 vulnerabilities
- Msa 20502 vulnerabilities
CVE-2018-7107hewlett packard enterprisehpe device entitlement gateway (deg)+1
EPSS score0.88%
A potential security vulnerability has been identified in HPE Device Entitlement Gateway (DEG) v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege.CVE-2018-7094hewlett packard enterprisehpe 3par service processors+1EPSS score0.36%
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA). The vulnerability may be exploited locally to allow disclosure of privileged information.CVE-2018-7108hewlett packard enterprisehpe storageworks xp7 automation director (autodir)+1EPSS score2.47%
HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vulnerability that exposed the user authentication information of the storage system. This problem sometimes occurred under specific conditions when running a service template.CVE-2018-7120hpsynergy_firmware+1EPSS score2.09%
A security vulnerability in the HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy running firmware 5.00.50, which is part of the HPE Synergy Custom SPP 2018.11.20190205, could allow local or remote unauthorized elevation of privilege.CVE-2018-7170debianntp+10EPSS score2.69%
ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.CVE-2018-7110hewlett packard enterprisehpe service governance framework (sgf)+1EPSS score0.66%
A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework (SGF) version 4.2, 4.3. A race condition under high load in SGF exists where SGF transferred different parameter to the enabler.CVE-2018-7119hpnonstop_safeguard_j_series+4EPSS score0.32%
A Local Disclosure of Sensitive Information vulnerability was identified in HPE NonStop Safeguard earlier than version SPR T9750L01^AIC or T9750H05^AIH, and later versions when the PASSWORD-PROMPT configuration attribute is not set to BLIND; all versions on H-series. STDSEC-STANDARD SECURITY PROD All prior versions before T6533L01^ADU or T6533H05^ADW, and later versions when the PASSWORD-PROMPT configuration attribute is not set to BLIND and all versions on H-series . Note that some commands in NonStop Safeguard and NonStop Standard Security software require username and password to be passed as command line parameters, which may lead to a local disclosure of the credentials.CVE-2018-7185canonicalubuntu_linux+17EPSS score9.00%
The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.CVE-2021-41000hpearubaos-cxEPSS score2.60%
Multiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.06.xxxx: 10.06.0170 and below, AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below. Aruba has released upgrades for Aruba AOS-CX devices that address these security vulnerabilities.CVE-2021-41005hpearuba_instant_on_1930_24g_4sfp\/sfp\+_firmware+6EPSS score0.82%
A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.CVE-2021-41004hpearuba_instant_on_1930_24g_4sfp\/sfp\+_firmware+6EPSS score0.95%
A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.CVE-2021-41001hpearubaos-cxEPSS score2.67%
An authenticated remote code execution vulnerability was discovered in the AOS-CX Network Analytics Engine (NAE) in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.09.xxxx: 10.09.0002 and below. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.CVE-2021-41002hpearubaos-cxEPSS score0.98%
Multiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX command line interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.06.xxxx: 10.06.0170 and below, AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.09.xxxx: 10.09.0002 and below. Aruba has released upgrades for Aruba AOS-CX devices that address these security vulnerabilities.CVE-2021-41003hpearubaos-cxEPSS score0.79%
Multiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API interface in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): AOS-CX 10.06.xxxx: 10.06.0170 and below, AOS-CX 10.07.xxxx: 10.07.0050 and below, AOS-CX 10.08.xxxx: 10.08.1030 and below, AOS-CX 10.09.xxxx: 10.09.0002 and below. Aruba has released upgrades for Aruba AOS-CX devices that address these security vulnerabilities.CVE-2021-26589hpesuperdome_flex_firmware+1EPSS score0.55%
A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting (XSS) because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE Superdome Flex Servers.CVE-2021-26580hpeintegrated_lights-out_amplifierEPSS score0.62%
A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS). HPE has provided the following software update to resolve the vulnerability in HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 or later.CVE-2021-26572hpebaseboard_management_controllerEPSS score0.33%
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.CVE-2021-26575hpebaseboard_management_controllerEPSS score0.42%
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletesolvideofile function.CVE-2021-26577hpebaseboard_management_controllerEPSS score0.38%
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function.CVE-2021-26571hpebaseboard_management_controllerEPSS score0.33%
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.