hpe Vulnerabilities and Affected Products
Vulnerabilities associated with HPE MSE Msg Gw application E-LTU.
Products
Clear product- edgeconnect_sd-wan_orchestrator14 vulnerabilities
- insight_remote_support5 vulnerabilities
- HPE System Management Homepage before v7.64 vulnerabilities
- arba_access_points_running_instantos_and_arubaos_103 vulnerabilities
- aruba_clear_pass_policy_manager3 vulnerabilities
- aruba_networking_instantos1 vulnerability
- arubaos1 vulnerability
- cray_system_management_software1 vulnerability
- HPE Business Critical Hard Drives1 vulnerability
- HPE enhanced Internet Usage Manager (eIUM)1 vulnerability
- HPE MSE Msg Gw application E-LTU1 vulnerability
- HPE NVMe Mixed Use Solid State Drives1 vulnerability
- HPE SATA Read Intensive Solid State Drives1 vulnerability
- HPE Server Enterprise Hard Drives1 vulnerability
- HPE Server SAS Hard Drives1 vulnerability
- HPE Server SATA Hard Drives1 vulnerability
- HPE Server Solid State Drives1 vulnerability
- HPE Service Pack for ProLiant1 vulnerability
- HPE Superdome Flex Server1 vulnerability
- HPE System Management Homepage (SMH)1 vulnerability
- HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy1 vulnerability
- hpe_athonet_mobile_care1 vulnerability
- Integrated Lights-Out1 vulnerability
- NetBatch-Plus software1 vulnerability
- NonStop SAFEGAURD and NonStop H-series STDSEC-STANDARD SECURITY Product1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-12000MEDIUM | HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when HTTPS is used between the USSD and an external USSD service logic application. Update to version 3.2 and update the HTTPS configuration as described in the HPE MSE Messaging Gateway Configuration and Operations Guide. | CVSS6.6v3.1 | EPSS1.15% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |