hpe

187 tracked vulnerabilities.

CVE-2021-29218 MEDIUM
HPE Agentless Mgmt Svcs <1.44.0.0 - Privilege Escalation
Feb 04, 2022
CVSS 6.7
EPSS 0.00
CVE-2021-29215 CRITICAL
HPE Ezmeral Data Fabric - Auth Bypass
Jan 18, 2022
CVSS 9.8
EPSS 0.01
CVE-2021-29213 MEDIUM
HPE ProLiant DL20 Gen10, ML30 Gen10, and MicroServer Gen10 Plus Firmware < 2.52 - Local Security Restriction Bypass
Nov 01, 2021
CVSS 6.7
EPSS 0.00
CVE-2021-26589 MEDIUM
HPE Superdome Flex Firmware < 3.40.106 - Cross-Site Scripting via Missing HttpOnly Attribute in Session Cookie
Oct 19, 2021
CVSS 6.1
EPSS 0.00
CVE-2021-26588 CRITICAL
HPE 3PAR, Primera, and Alletra 9000 - Unauthenticated Administrator Code Execution
Oct 11, 2021
CVSS 9.8
EPSS 0.02
CVE-2021-26587 MEDIUM
HPE StoreOnce < 4.2.3 - DOM-based Cross-Site Scripting
Sep 27, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-33895 HIGH
ETINET BACKBOX E4.09 and H4.09 - Improper Authentication via User ID Mismanagement
Jun 25, 2021
CVSS 8.1
EPSS 0.00
CVE-2021-26585 MEDIUM
HPE OneView Global Dashboard <2.32 - Info Disclosure
Jun 24, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-26581 MEDIUM
HPE Superdome Flex Server Firmware < 3.30.142 - Denial of Service via BMC Web Interface
Apr 01, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-26580 MEDIUM
HPE iLO Amplifier Pack < 1.95 - Cross-Site Scripting
Apr 01, 2021
CVSS 6.1
EPSS 0.00
CVE-2021-26579 MEDIUM
HPE Unified Data Management - Use of Hard-coded Cryptographic Key
Mar 30, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-26578 HIGH
HPE Network Orchestrator < 2.5 - SQL Injection
Mar 22, 2021
CVSS 7.5
EPSS 0.00
CVE-2021-3191 HIGH
HPE Web ViewPoint 06.03-06.23.01 - Remote Unauthorized Access
Feb 09, 2021
CVSS 8.8
EPSS 0.02
CVE-2021-22267 MEDIUM
HPE Web ViewPoint - Authentication Bypass via Replay Attack
Feb 09, 2021
CVSS 5.9
EPSS 0.00
CVE-2021-25141 MEDIUM
Aruba and HPE Switch Firmware - Authenticated Denial of Service via Management Interface Data Processing
Feb 09, 2021
CVSS 4.4
EPSS 0.00
CVE-2021-26576 HIGH
HPE Baseboard Management Controller < 3.0.14.0 - Command Injection via libifc.so uploadsshkey Function
Feb 08, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-26577 HIGH
HPE Baseboard Management Controller < 3.0.14.0 - Buffer Overflow in libifc.so uploadsshkey Function
Feb 08, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-26575 HIGH
HPE Baseboard Management Controller < 3.0.14.0 - Path Traversal in libifc.so webdeletesolvideofile Function
Feb 08, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-26574 HIGH
HPE Baseboard Management Controller < 3.0.14.0 - Path Traversal in libifc.so webdeletevideofile Function
Feb 08, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-26573 HIGH
HPE Baseboard Management Controller < 3.0.14.0 - Buffer Overflow in libifc.so webgeneratesslcfg
Feb 08, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-25172 HIGH
HPE Apollo 70 System <3.0.14.0 - Command Injection
Feb 08, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-26572 HIGH
HPE Baseboard Management Controller < 3.0.14.0 - Buffer Overflow in libifc.so webgetactivexcfg
Feb 08, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-26571 HIGH
HPE Baseboard Management Controller < 3.0.14.0 - Buffer Overflow in libifc.so webgetactivexcfg
Feb 08, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-26570 HIGH
HPE Baseboard Management Controller < 3.0.14.0 - Buffer Overflow in libifc.so webifc_setadconfig
Feb 08, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-25171 HIGH
HPE Apollo 70 System <3.0.14.0 - Buffer Overflow
Feb 08, 2021
CVSS 7.8
EPSS 0.00
Products
integrated_lights-out_5_firmware 17 cloudline_cl3100_gen10_server_firmware 16 cloudline_cl4100_gen10_server_firmware 16 cloudline_cl5200_gen9_server_firmware 16 cloudline_cl5800_gen10_server_firmware 16 cloudline_cl5800_gen9_server_firmware 16 arubaos-cx 14 baseboard_management_controller 14 insight_remote_support 9 storeonce_system 8 autopass_license_server 7 hpux-ntp 7 nimbleos 6 oneview_global_dashboard 6 aruba_networking_private_5g_core 5 superdome_flex_server_firmware 5 HPE System Management Homepage before v7.6 4 smart_update_manager 4 arubaos-switch 3 hf20_firmware 3 hf20c_firmware 3 hf20h_firmware 3 hf40_firmware 3 hf40c_firmware 3 hf60_firmware 3 hf60c_firmware 3 oneview 3 serviceguard_for_linux 3 sf100_firmware 3 sf300_firmware 3
Quick Filters
Critical CVEs With Exploits In CISA KEV