Hewlett Packard Enterprise Vulnerabilities and Affected Products
Vulnerabilities associated with HPE CentralView Fraud Risk Management.
Products
Clear product- Intelligent Management Center (iMC) PLAT95 vulnerabilities
- Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central16 vulnerabilities
- Matrix Operating Environment15 vulnerabilities
- Aruba ClearPass Policy Manager11 vulnerabilities
- System Management Homepage for Windows and Linux9 vulnerabilities
- HPE 3PAR Service Processors7 vulnerabilities
- HPE AutoPass License Server7 vulnerabilities
- Network Automation6 vulnerabilities
- HPE CentralView Fraud Risk Management5 vulnerabilities
- HPE Intelligent Management Center (IMC)5 vulnerabilities
- Aruba ClearPass4 vulnerabilities
- HP Network Node Manager (NNMi)4 vulnerabilities
- HPE OneView4 vulnerabilities
- SiteScope4 vulnerabilities
- Version Control Repository Manager (VCRM)4 vulnerabilities
- ArubaOS-Switch3 vulnerabilities
- Data Protector3 vulnerabilities
- HP Keyview3 vulnerabilities
- HPE Aruba Networking EdgeConnect SD-WAN Orchestrator3 vulnerabilities
- HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 103 vulnerabilities
- HPE Telco Network Function Virtual Orchestrator3 vulnerabilities
- Insight Remote Support3 vulnerabilities
- Moonshot Provisioning Manager Appliance3 vulnerabilities
- Systems Insight Manager using OpenSSL3 vulnerabilities
- Aruba AirWave2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2018-7068MEDIUM | HPE has identified a remote HOST header attack vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version. CWE-444Aug 6, 2018 | CVSS6.1v3.0 | EPSS0.974% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-7069HIGH | HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version. CWE-287Aug 6, 2018 | CVSS7.5v3.0 | EPSS1.8% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2018-7070MEDIUM | HPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version. CWE-200Aug 6, 2018 | CVSS5.3v3.0 | EPSS1.89% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-8991MEDIUM | HPE has identified a cross site scripting (XSS) vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version. CWE-79Aug 6, 2018 | CVSS5.4v3.0 | EPSS0.547% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-8992CRITICAL | HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version. Aug 6, 2018 | CVSS9.8v3.0 | EPSS2.59% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |