HPESBHF04516 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to 1.8007-05-2023 HPE ProLiant XL220n Gen10 Plus Server - Prior to 1.8007-05-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04512 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to 1.8007-05-2023 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-41804 |...

HPESBHF04514 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall),Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4510 Gen10 System - Prior to 2.9007-20-2023 HPE ProLiant XL230k Gen10 Server - Prior to 2.9007-20-2023 HPE Apollo 4200 Gen10 Server - Prior to 2.9007-20-2023 HPE...

HPE MSA Storage Session Reuse (HPESBST03940)

The version of HPE MSA Storage installed on the remote host is prior to GL225P002-02, VE270P002-02, or VL270P002-02. It is, therefore, affected by a vulnerability as referenced in the HPESBST03940 advisory. - A remote session reuse vulnerability leading to access restriction bypass was discovered...

HPESBHF04510 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall), Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.9007-20-2023 HPE Synergy 480 Gen10 Compute Module - Prior to 2.9007-20-2023 HPE Synergy 660 Gen10 Compute Module - Prior ...

HPESBGN04524 rev.1 - HPE Intel E810 Series Ethernet Controllers, INTEL-SA-00835, Intel Ethernet Controllers and Adapters Advisory, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Intel E810-XXVDA4 Ethernet 10/25Gb 4-port SFP28 Adapter for HPE - Prior to v4.20 Intel E810-CQDA2 Ethernet 100Gb 2-port QSFP28 Adapter for HPE - Prior to v4.20 Intel E810-CQDA2...

HPESBGN04499 rev.2 - HPE Unified Correlation Analyzer, Multiple Vulnerabilities

Potential Security Impact: Local: Directory Traversal; Remote: Access Restriction Bypass, Authentication Bypass, Code Execution, Denial of Service DoS, Disclosure of Information, XML External Entity XXE, Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified...

HPESBHF04505 rev.1 - Certain HPE ProLiant DL Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Plus server - Prior to 1.8007-05-2023 HPE ProLiant DL380 Gen10 Plus server - Prior to 1.8007-05-2023 HPE ProLiant DL110 Gen10 Plus Telco server - Prio...

HPESBHF04521 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920t Server Blade - Prior to 1.7407-24-2023 HPE Edgeline e920 Server Blade - Prior to 1.7407-24-2023 HPE Edgeline e920d Server Blade - Prior to 1.7407-24-2023 CV...

CVE-2023-30904

A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information...

CVE-2023-30904

A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information...

Design/Logic Flaw

A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information...

CVE-2023-30904

A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information...

CVE-2023-30904

A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information...

CVE-2023-30904

Technical details (affected product/versions, root cause, exploit information, or a fix) are not publicly available in the provided connected documents. Monitor for updates.

HPESBHF04473 rev.1 - SGI UV300 and HPE MC990 X Remote Management Controller (RMC), Local Multiple Vulnerabilities

Potential Security Impact: Local: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity MC990 X Server RMC firmware 1.2.7 or earlier SGI UV 300 RMC firmware 1.2.7 or earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

Security Bulletin: IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2022-43902

Summary An issue within MQ causes it to be vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. Vulnerability Details CVEID:CVE-2022-43902 DESCRIPTION: IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially...

HPESBHF04484 rev.1 - HPE Smart Storage Administrator (SSA) Offline, Local Arbitrary Code Execution

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Smart Storage Administrator -All Offline versions CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7205 |...

HPESBHF04455 rev.1 - HPE Cray EX235a Accelerator Blade Using AMD Processors, Multiple Vulnerabilities

Potential Security Impact: Local: Code Execution, Compromise of System Integrity, Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235a Accelerator Blade - Prior to 1.6.2 CVSS Scores: | CVE | CVSS...

CVE-2023-28092

A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnerable to exploits by attackers with physical access inside the server chassis...