Lucene search
+L

2035 matches found

OSV
OSV
•added 2022/04/12 5:15 p.m.•16 views

CVE-2022-23702

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE...

6.7CVSS5.7AI score0.00237EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/12 5:15 p.m.•13 views

CVE-2022-23702

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE...

6.7CVSS6.5AI score0.00237EPSS
SaveExploits0References2
NVD
NVD
•added 2022/04/12 5:15 p.m.•24 views

CVE-2022-23702

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE...

6.7CVSS0.00237EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/12 5:15 p.m.•28 views

Privilege escalation

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE...

4.6CVSS6.6AI score0.00237EPSS
SaveExploits0References1Affected Software2
CVE
CVE
•added 2022/04/12 4:11 p.m.•107 views

CVE-2022-23702

The CVE-2022-23702 issue affects HPE Superdome Flex Server and Superdome Flex 280 Server. A locally exploitable privilege-escalation vulnerability exists that can be exploited by a user with Administrator access. The problem is resolved in firmware updates: HPE Superdome Flex Server version 3.50....

6.7CVSS6.6AI score0.00237EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/04/12 4:11 p.m.•37 views

CVE-2022-23702

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE...

6.8AI score0.00237EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•6 views

CVE-2022-23702: Undefined Security Weakness

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to escalate their privilege. The vulnerability is resolved in the latest firmware update. HPE...

6.7CVSS6.6AI score0.00237EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•35 views

HPE Superdome Flex Server 安全漏洞

HPE Superdome Flex Server is a modular server product from Hewlett Packard Enterprise hpe. A security vulnerability exists in HPE Superdome Flex and Superdome Flex 280 Servers that allows local users with administrator access to elevate their privileges...

6.7CVSS6.6AI score0.00237EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•27 views

PT-2022-16212 · Hewlett Packard · Hpe Superdome Flex 280 Server +1

Name of the Vulnerable Software and Affected Versions: HPE Superdome Flex Server versions prior to 3.50.58 HPE Superdome Flex 280 Server versions prior to 1.20.204 Description: A potential security issue has been identified that could allow a user with Administrator access to escalate their...

6.7CVSS6.7AI score0.00237EPSS
SaveExploits0References2
CBLMariner
CBLMariner
•added 2022/04/09 6:51 a.m.•41 views

CVE-2019-6293 affecting package flex for versions less than 2.6.4-7

CVE-2019-6293 affecting package flex for versions less than 2.6.4-7. A patched version of the package is available...

5.5CVSS5.6AI score0.01601EPSS
SaveExploits1
HPE Security Bulletins
HPE Security Bulletins
•added 2022/04/04 12:00 a.m.•21 views

HPESBHF04266 rev.1 - HPE Superdome Flex and Superdome Flex 280 Servers, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to 3.50.58 HPE Superdome Flex 280 Server - Prior to 1.20.204 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

6.7CVSS6.1AI score0.00237EPSS
SaveExploits0
OSV
OSV
•added 2022/03/29 6:15 a.m.•16 views

CVE-2022-1074

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input HTML Injection in the WiFi settings of the dashboard leads to html injection...

5.4CVSS5.2AI score0.00441EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/29 6:15 a.m.•24 views

CVE-2022-1074

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input HTML Injection in the WiFi settings of the dashboard leads to html injection...

5.4CVSS0.00441EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/29 6:15 a.m.•33 views

CVE-2022-1077

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

7.5CVSS0.0251EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/29 6:15 a.m.•23 views

Design/Logic Flaw

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input HTML Injection in the WiFi settings of the dashboard leads to html injection...

3.5CVSS5.9AI score0.00441EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/03/29 6:15 a.m.•37 views

Information disclosure

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

5CVSS7.2AI score0.0251EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2022/03/29 5:50 a.m.•18 views

CVE-2022-1077 TEM FLEX-1080/FLEX-1085 Log information disclosure

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

5.3CVSS7.5AI score0.0251EPSS
SaveExploits0References1
CVE
CVE
•added 2022/03/29 5:50 a.m.•117 views

CVE-2022-1077

CVE-2022-1077 affects TEM FLEX-1080/1085 (version 1.6.0). The issue is in the Log Handler’s log.cgi, allowing remote, unauthenticated requests to disclose hardware information. Documented impact is information disclosure with partial confidentiality impact; exploitation details are not provided i...

7.5CVSS6AI score0.0251EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/29 5:50 a.m.•48 views

CVE-2022-1077 TEM FLEX-1080/FLEX-1085 Log information disclosure

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

5.3CVSS7.5AI score0.0251EPSS
SaveExploits0References1
CVE
CVE
•added 2022/03/29 5:50 a.m.•69 views

CVE-2022-1074

The connected records confirm CVE-2022-1074 affects TEM FLEX-1085 version 1.6.0. The issue is an HTML injection vulnerability triggered by input in the dashboard’s WiFi settings (input field HTML Injection as described). The impact is described as HTML injection via the affected UI, but the docum...

5.4CVSS5.2AI score0.00441EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder