Hewlett Packard Enterprise Vulnerabilities and Affected Products

Products

Intelligent Management Center (iMC) PLAT95 vulnerabilities
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central16 vulnerabilities
Matrix Operating Environment15 vulnerabilities
Aruba ClearPass Policy Manager11 vulnerabilities
System Management Homepage for Windows and Linux9 vulnerabilities
HPE 3PAR Service Processors7 vulnerabilities
HPE AutoPass License Server7 vulnerabilities
Network Automation6 vulnerabilities
HPE CentralView Fraud Risk Management5 vulnerabilities
HPE Intelligent Management Center (IMC)5 vulnerabilities
Aruba ClearPass4 vulnerabilities
HP Network Node Manager (NNMi)4 vulnerabilities
HPE OneView4 vulnerabilities
SiteScope4 vulnerabilities
Version Control Repository Manager (VCRM)4 vulnerabilities
ArubaOS-Switch3 vulnerabilities
Data Protector3 vulnerabilities
HP Keyview3 vulnerabilities
HPE Aruba Networking EdgeConnect SD-WAN Orchestrator3 vulnerabilities
HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 103 vulnerabilities
HPE Telco Network Function Virtual Orchestrator3 vulnerabilities
Insight Remote Support3 vulnerabilities
Moonshot Provisioning Manager Appliance3 vulnerabilities
Systems Insight Manager using OpenSSL3 vulnerabilities
Aruba AirWave2 vulnerabilities

Hewlett Packard Enterprise vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2018-7115MEDIUM	HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in dbman.exe opcode 10001 on Windows. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions. CWE-119Dec 3, 2018	CVSS5.3v3.0	EPSS13.4%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2018-7114CRITICAL	HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions. CWE-119Dec 3, 2018	CVSS9.8v3.0	EPSS32.8%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2018-7116HIGH	HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions. CWE-119Dec 3, 2018	CVSS7.5v3.0	EPSS10.3%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2018-7075MEDIUM	A remote cross-site scripting (XSS) vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT version v7.3 (E0506). The vulnerability is fixed in Intelligent Management Center PLAT 7.3 E0605P04 or subsequent version. CWE-79Aug 6, 2018	CVSS6.1v3.0	EPSS0.969%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2018-7074CRITICAL	A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P07. The vulnerability was resolved in iMC PLAT 7.3 E0605P04 or subsequent version. Aug 6, 2018	CVSS9.8v3.0	EPSS16.7%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX