HPESBMU04599 rev.1 - HPE IceWall products, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE IceWall Federation - 4.0 RHEL 8 and Windows - SAML IdP, Office 365 module, OIDC RP and OIDC OP. IceWall Gen11 Password Reset Option - 11.0 RHEL 8 and Windows IceWall...

HPESBHF04596 rev.2 - HPE SimpliVity Servers Using SSH, Remote Authentication Bypass (Terrapin Attack)

Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. SimpliVity Omnistack for HPE - Version 4.2.0 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-48795 |...

HPESBGN04590 rev.1 - HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Arbitrary File Modification; Remote: Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified OSS Console UOC - Prior to v3.1.1 CVSS Scores: | CVE | CVSS Vector | Base...

CVE-2023-6573

HPE OneView may have a missing passphrase during restore...

CVE-2023-6573

HPE OneView may have a missing passphrase during restore...

Design/Logic Flaw

HPE OneView may have a missing passphrase during restore...

CVE-2023-50275

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...

CVE-2023-50275

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...

CVE-2023-50274

HPE OneView may allow command injection with local privilege escalation...

Authentication flaw

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...

Command injection

HPE OneView may allow command injection with local privilege escalation...

CVE-2023-6573

HPE OneView may have a missing passphrase during restore...

CVE-2023-6573

Summary: CVE-2023-6573 affects Hewlett Packard Enterprise OneView due to a missing passphrase during the restore process. The NVD entry assigns a CVSSv3.1 base score of 5.5 (Medium) with Local attack vector, Low attack complexity, no privileges required, and user interaction needed; confidentiali...

CVE-2023-6573

HPE OneView may have a missing passphrase during restore...

CVE-2023-50275

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...

CVE-2023-50275

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...

CVE-2023-50275

HPE OneView’s clusterService exposes an authentication bypass that can be exploited remotely to cause DoS. The vulnerability arises from inadequate validation of the attacker’s IP, exposing a function intended for loopback-only use, enabling a denial-of-service without authentication. Affected pr...

CVE-2023-50274

HPE OneView may allow command injection with local privilege escalation...

CVE-2023-50274

HPE OneView may allow command injection with local privilege escalation...

CVE-2023-50274

CVE-2023-50274 affects Hewlett Packard Enterprise OneView. The confirmed issue is a command injection with local privilege escalation. The explicit root cause described by the connected ZDI advisory is a flaw in the startUpgradeCommon method where a user-supplied string is not properly validated ...