Hewlett Packard Enterprise (HPE) Vulnerabilities and Affected Products
Vulnerabilities associated with HPE 3PAR StoreServ Management and Core Software Media.
Products
Clear product- Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central51 vulnerabilities
- ArubaOS (AOS)34 vulnerabilities
- Aruba ClearPass Policy Manager33 vulnerabilities
- EdgeConnect SD-WAN Orchestrator27 vulnerabilities
- HPE Aruba Networking Wireless Operating System (AOS)27 vulnerabilities
- Aruba EdgeConnect Enterprise Software23 vulnerabilities
- AOS-8 Instant and AOS-10 AP18 vulnerabilities
- Aruba Access Points running InstantOS and ArubaOS 1016 vulnerabilities
- Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;14 vulnerabilities
- Aruba EdgeConnect Enterprise Orchestration Software13 vulnerabilities
- AOS-CX12 vulnerabilities
- HPE OneView11 vulnerabilities
- HPE Aruba Networking ClearPass Policy Manager10 vulnerabilities
- HPE Aruba Networking EdgeConnect SD-WAN Gateway9 vulnerabilities
- HPE Athonet Core8 vulnerabilities
- HPE StoreOnce Software8 vulnerabilities
- ArubaOS Wi-Fi Controllers and Campus/Remote Access Points7 vulnerabilities
- HPE 3PAR Service Processor7 vulnerabilities
- Aruba OS6 vulnerabilities
- HPE 3PAR StoreServ Management and Core Software Media6 vulnerabilities
- HPE Aruba Networking Access Points, Instant AOS-8, and AOS-106 vulnerabilities
- HPE Aruba Networking AOS6 vulnerabilities
- HPE Aruba Networking AOS-CX5 vulnerabilities
- HPE Aruba Networking EdgeConnect SD-WAN5 vulnerabilities
- HPE Aruba Networking Fabric Composer (AFC)5 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-5407MEDIUM | A remote information disclosure vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. Aug 9, 2019 | CVSS6.3v3.0 | EPSS0.971% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-5406HIGH | A remote session reuse vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. CWE-384Aug 9, 2019 | CVSS7.2v3.0 | EPSS1.42% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-5405HIGH | A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. Aug 9, 2019 | CVSS7.3v3.0 | EPSS1.59% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-5404HIGH | A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. CWE-74Aug 9, 2019 | CVSS8.8v3.0 | EPSS1.62% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-5403MEDIUM | A remote multiple cross-site scripting vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. CWE-79Aug 9, 2019 | CVSS4.8v3.0 | EPSS0.548% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-5402CRITICAL | A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. Aug 9, 2019 | CVSS9.4v3.0 | EPSS4.3% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |