hpe Vulnerabilities and Affected Products
Vulnerabilities associated with HPE Superdome Flex Server.
Products
Clear product- edgeconnect_sd-wan_orchestrator14 vulnerabilities
- insight_remote_support5 vulnerabilities
- HPE System Management Homepage before v7.64 vulnerabilities
- arba_access_points_running_instantos_and_arubaos_103 vulnerabilities
- aruba_clear_pass_policy_manager3 vulnerabilities
- aruba_networking_instantos1 vulnerability
- arubaos1 vulnerability
- cray_system_management_software1 vulnerability
- HPE Business Critical Hard Drives1 vulnerability
- HPE enhanced Internet Usage Manager (eIUM)1 vulnerability
- HPE MSE Msg Gw application E-LTU1 vulnerability
- HPE NVMe Mixed Use Solid State Drives1 vulnerability
- HPE SATA Read Intensive Solid State Drives1 vulnerability
- HPE Server Enterprise Hard Drives1 vulnerability
- HPE Server SAS Hard Drives1 vulnerability
- HPE Server SATA Hard Drives1 vulnerability
- HPE Server Solid State Drives1 vulnerability
- HPE Service Pack for ProLiant1 vulnerability
- HPE Superdome Flex Server1 vulnerability
- HPE System Management Homepage (SMH)1 vulnerability
- HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy1 vulnerability
- hpe_athonet_mobile_care1 vulnerability
- Integrated Lights-Out1 vulnerability
- NetBatch-Plus software1 vulnerability
- NonStop SAFEGAURD and NonStop H-series STDSEC-STANDARD SECURITY Product1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-11998MEDIUM | HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerability could allow an Administrator to bypass security restrictions and access multiple remote vulnerabilities including information disclosure, or denial of service. HPE has provided firmware updates that address the above vulnerabilities for the HPE Superdome Flex Server starting with firmware version v3.20.186 (not available online) and v3.20.206 (ava… CWE-20Jan 16, 2020 | CVSS5.5v3.1 | EPSS0.755% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |