HPE 3PAR StoreServ Management And Core Software Media Security Vulnerabilities
A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to inject code and elevate their privilege in SSMC. The scope of this vulnerability is limited to SSMC. Note: The arrays being managed are...
7.2CVSS
6.9AI Score
0.001EPSS
SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC) 3.7.0.0 is an off node multiarray manager web application and remains isolated from data on the managed arrays. HPE has provided an update to HPE StoreServ Management Console (SSMC) software 3.7.0.0*....
9.8CVSS
9.5AI Score
0.005EPSS
A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to...
9.4CVSS
9.1AI Score
0.003EPSS
A remote information disclosure vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to...
6.3CVSS
6.1AI Score
0.001EPSS
A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to...
8.8CVSS
8.6AI Score
0.001EPSS
A remote multiple cross-site scripting vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to...
4.8CVSS
4.9AI Score
0.001EPSS
A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to...
7.3CVSS
7.1AI Score
0.001EPSS
A remote session reuse vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to...
7.2CVSS
6.9AI Score
0.001EPSS