hpe Vulnerability Advisory Catalog

Total 170 security vulnerabilities recorded for hpe software and firmware.

← Back to All Vendors
CVE-2020-24626 CRITICAL
Component: utility_computing_service_meter

Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) U...

📅 2020-09-23
CVSS 9.8 Dossier →
Component: utility_computing_service_meter

Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Compu...

📅 2020-09-23
CVSS 7.5 Dossier →
Component: utility_computing_service_meter

Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Com...

📅 2020-09-23
CVSS 7.5 Dossier →
Component: universal_api_framework

A potential security vulnerability has been identified in Hewlett Packard Enterprise Universal API Framework. The vulnerability could be remotely expl...

📅 2020-09-18
CVSS 6.5 Dossier →
CVE-2020-7205 MEDIUM
Component: intelligent_provisioning

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vuln...

📅 2020-07-30
CVSS 6.7 Dossier →
Component: nimbleos

Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to access...

📅 2020-05-19
CVSS 8.1 Dossier →
Component: nimbleos

Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker t...

📅 2020-05-19
CVSS 8.8 Dossier →
CVE-2020-7137 MEDIUM
Component: superdome_flex_server_firmware

A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or la...

📅 2020-05-19
CVSS 6.7 Dossier →
CVE-2020-7136 CRITICAL
Component: smart_update_manager

A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard Enterprise h...

📅 2020-04-30
CVSS 9.8 Dossier →
CVE-2019-12002 CRITICAL
Component: msa_1040_firmware

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MS...

📅 2020-04-17
CVSS 9.8 Dossier →
Component: msa_1040_firmware

A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MS...

📅 2020-04-17
CVSS 6.4 Dossier →
Component: opencall_media_platform

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform (OCMP) resulting in remote arbitrary file download and cross si...

📅 2020-04-16
CVSS 6.9 Dossier →
Component: superdome_flex_server_firmware

HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerability...

📅 2020-01-16
CVSS 5.5 Dossier →
CVE-2019-11996 CRITICAL
Component: nimbleos

Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could...

📅 2019-11-07
CVSS 9.8 Dossier →
CVE-2019-11988 CRITICAL
Component: smart_update_manager

A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager (SUM) earlier than version 8.3.5....

📅 2019-06-05
CVSS 9.8 Dossier →
Component: smart_update_manager

A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of privilege....

📅 2019-06-05
CVSS 7.8 Dossier →
CVE-2018-7110 MEDIUM
Component: service_governance_framework

A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework (SGF) version 4.2, 4.3. A race condit...

📅 2018-10-17
CVSS 5.9 Dossier →
CVE-2018-7108 MEDIUM
Component: storageworks_xp7_automation_director

HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vulnerabilit...

📅 2018-09-27
CVSS 5.9 Dossier →
Component: device_entitlement_gateway

A potential security vulnerability has been identified in HPE Device Entitlement Gateway (DEG) v3.2.4, v3.3 and v3.3.1. The vulnerability could be rem...

📅 2018-09-27
CVSS 8.8 Dossier →
CVE-2018-7094 MEDIUM
Component: 3par_service_provider

A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA). The vulnerability may be exploited locally to al...

📅 2018-08-14
CVSS 5.5 Dossier →
Component: arubaos

Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and...

📅 2018-08-06
CVSS 7.5 Dossier →
CVE-2017-5689 CRITICAL
Component: proliant_ml10_gen9_server_firmware

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and In...

📅 2017-05-02
CVSS 9.8 Dossier →
Component: project_and_portfolio_management_center

HPE Project and Portfolio Management Center (PPM) 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to execute arbitrary commands or ob...

📅 2016-06-09
CVSS 8.8 Dossier →
CVE-2014-2608 UNKNOWN
Component: smart_update_manager

Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows local users to...

📅 2014-12-10
CVSS 7.2 Dossier →
Page 7 of 8 (170 Total Records)