131 matches found
CVE-2019-5400
A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...
CVE-2019-5400
The CVE-2019-5400 entry describes a remote session reuse/authorization issue in HPE 3PAR Service Processor prior to version 5.0.5.1. Connected sources consistently identify the affected product as HPE 3PAR Service Processor and indicate the root cause is an authorization/session handling flaw tha...
CVE-2019-5399
The CVE-2019-5399 entry describes a remote gain of authorized access vulnerability in HPE 3PAR Service Processor, affected on versions prior to 5.0.5.1. Connected documents corroborate that the issue concerns HPE 3PAR SP and cites an over-the-horizon access flaw enabling an attacker with network ...
CVE-2019-5399
A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...
CVE-2019-5398
A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...
CVE-2019-5398
CVE-2019-5398 describes a remote cross-site scripting vulnerability in HPE 3PAR Service Processor (SP). Affected product: HPE 3PAR Service Processor versions prior to 5.0.5.1. Vulnerable component: SP web interface exposing XSS risk (exact internal vector not specified in the provided documents)....
CVE-2019-5397
CVE-2019-5397 affects HPE 3PAR Service Processor prior to 5.0.5.1. The vulnerability is a remote bypass of security restrictions (no user interaction required) that could allow an attacker to compromise confidentiality, integrity, and availability. CVSSv3 base score is 9.4 (CRITICAL) with network...
CVE-2019-5397
A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...
CVE-2019-5396
CVE-2019-5396 affects HPE 3PAR Service Processor; prior to version 5.0.5.1, there is a remote authentication bypass vulnerability in the SP management interface. The issue allows an attacker with network access and no privileges to bypass authentication, potentially compromising confidentiality (...
CVE-2019-5396
A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...
CVE-2019-5395
A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...
CVE-2019-5395
HPE 3PAR Service Processor (SP) is vulnerable to a remote arbitrary file upload in versions prior to 5.0.5.1. Connected sources corroborate this CVE and indicate a high-impact outcome (C/H, I/H, A/H) over a network with low complexity, but the documents do not provide exploitation details or a st...
CVE-2019-11991
HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...
Information disclosure
HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...
CVE-2019-11991
CVE-2019-11991 concerns a remote information-disclosure vulnerability in HPE 3PAR Service Processor (SP) versions 4.1 through 4.4. The flaw affects the SP itself and any managed 3PAR arrays, potentially compromising confidentiality, integrity, and availability. The supplied connected documents co...
CVE-2019-11991
HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...
HPE 3PAR Service Processor Cross-Site Request Forgery Vulnerability
HPE 3PAR Service Processor SP is a suite of virtual service processors deployed on the VMware vSphere hypervisor from Hewlett Packard Enterprise HPE, USA. A cross-site request forgery vulnerability exists in versions prior to HPE 3PAR SP SP-4.4.0.GA-110 MU7. A remote attacker could exploit this...
CVE-2018-7097
A security vulnerability was identified in 3PAR Service Processor SP prior to SP-4.4.0.GA-110MU7. The vulnerability may be exploited remotely to allow cross-site request forgery...