CVE-2019-5396

A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5398

CVE-2019-5398 describes a remote cross-site scripting vulnerability in HPE 3PAR Service Processor (SP). Affected product: HPE 3PAR Service Processor versions prior to 5.0.5.1. Vulnerable component: SP web interface exposing XSS risk (exact internal vector not specified in the provided documents)....

CVE-2019-5397

CVE-2019-5397 affects HPE 3PAR Service Processor prior to 5.0.5.1. The vulnerability is a remote bypass of security restrictions (no user interaction required) that could allow an attacker to compromise confidentiality, integrity, and availability. CVSSv3 base score is 9.4 (CRITICAL) with network...

CVE-2019-5395

HPE 3PAR Service Processor (SP) is vulnerable to a remote arbitrary file upload in versions prior to 5.0.5.1. Connected sources corroborate this CVE and indicate a high-impact outcome (C/H, I/H, A/H) over a network with low complexity, but the documents do not provide exploitation details or a st...

CVE-2019-5395

A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

PT-2019-17635

Name of the Vulnerable Software and Affected Versions HPE 3PAR Service Processor versions prior to 5.0.5.1 Description A remote arbitrary file upload issue was discovered. Recommendations For versions prior to 5.0.5.1, update to version 5.0.5.1 or later to resolve the issue...

PT-2019-17640

Name of the Vulnerable Software and Affected Versions HPE 3PAR Service Processor versions prior to 5.0.5.1 Description A remote session reuse issue was found. Recommendations For versions prior to 5.0.5.1, update to version 5.0.5.1 or later to resolve the issue...

PT-2019-17636

Name of the Vulnerable Software and Affected Versions HPE 3PAR Service Processor versions prior to 5.0.5.1 Description A remote authentication bypass issue was discovered. Recommendations For versions prior to 5.0.5.1, update to version 5.0.5.1 or later to resolve the issue...

PT-2019-17637

Name of the Vulnerable Software and Affected Versions HPE 3PAR Service Processor versions prior to 5.0.5.1 Description A remote bypass of security restrictions issue was discovered. Recommendations For versions prior to 5.0.5.1, update to version 5.0.5.1 or later to resolve the issue...

CVE-2019-5396: Undefined Security Weakness

A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5400: Session Fixation

A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5397: Improper Neutralization of Input During Web Page Generation

A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5398: Improper Neutralization of Input During Web Page Generation

A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5399: Undefined Security Weakness

A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

PT-2019-17638

Name of the Vulnerable Software and Affected Versions HPE 3PAR Service Processor versions prior to 5.0.5.1 Description A remote cross-site vulnerability was discovered. Recommendations For versions prior to 5.0.5.1, update to version 5.0.5.1 or later to resolve the issue...

CVE-2019-5395: Unrestricted Upload of File with Dangerous Type

A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

PT-2019-17639

Name of the Vulnerable Software and Affected Versions HPE 3PAR Service Processor versions prior to 5.0.5.1 Description A remote gain authorized access issue was discovered, allowing unauthorized access. Recommendations For versions prior to 5.0.5.1, update to version 5.0.5.1 or later to resolve t...

PT-2019-12624

Name of the Vulnerable Software and Affected Versions HPE 3PAR Service Processor SP versions 4.1 through 4.4 Description A remote information disclosure issue exists, potentially disrupting the confidentiality, integrity, and availability of the Service Processor and managed 3PAR arrays...

CVE-2019-11991: Exposure of Sensitive Information to an Unauthorized Actor

HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...

HPE 3PAR Service Processor Cross-Site Request Forgery Vulnerability

HPE 3PAR Service Processor SP is a suite of virtual service processors deployed on the VMware vSphere hypervisor from Hewlett Packard Enterprise HPE, USA. A cross-site request forgery vulnerability exists in versions prior to HPE 3PAR SP SP-4.4.0.GA-110 MU7. A remote attacker could exploit this...