CVE-2021-29213

A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sensitiv...

CVE-2021-29213

A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sensitiv...

CVE-2021-29212

A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to confidentiality,...

Security feature bypass

A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sensitiv...

CVE-2021-29212

CVE-2021-29212 affects HPE iLO Amplifier Pack on versions 1.80/1.81/1.90/1.95. It describes a remote unauthenticated directory traversal that enables arbitrary code execution with root context via the backup endpoint due to improper path validation. ZDI notes no auth required; a fix is available ...

CVE-2021-29212

A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to confidentiality,...

CVE-2021-29213

A potential local bypass of security restrictions vulnerability has been identified in HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus server's system ROMs prior to version 2.52. The vulnerability could be locally exploited to cause disclosure of sensitiv...

CVE-2021-29213

CVE-2021-29213 affects HPE ProLiant DL20 Gen10, ML30 Gen10, and MicroServer Gen10 Plus systems running ROMs before 2.52. The issue enables local bypass of security restrictions, potentially allowing disclosure of sensitive data, DoS, or integrity compromise. CVSSv3.1: Local access, high privilege...

HPESBHF04205 rev.1 - HPE Edgeline EL300 Converged Edge Systems Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline EL300 Converged Edge System Prior to BIOS: EL011.40 09/25/2021; prior to ME: v11.8.86.3909 CVSS Scores: | CVE | CVSS Vector | Base Scor...

HPE ProLiant 安全漏洞

Hpe ProLiant is a hybrid-cloud, intelligent computing infrastructure server from Hewlett-Packard Hpe. It is used to provide unmatched workload optimization, 360-degree security, and intelligent automation. HPE ProLiant A security vulnerability exists, which stems from a vulnerability that can be...

HPESBNW04204 rev.1 - HPE 6120XG Switches, Remote Unauthenticated Disclosure of Information

Potential Security Impact: Remote: Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 6120XG Blade Switch firmware Z.14.58 or earlier HPE ProCurve 6120XG Blade Switch for Integrity Servers firmware Z.14.58 or earlier CVSS Scores: | CVE |...

CVE-2021-26589

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE...

CVE-2021-26589

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE...

Cross site scripting

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE...

CVE-2021-26589

This CVE concerns HPE Superdome Flex Servers where a Cross Site Scripting (XSS) vulnerability arises because the Session Cookie lacks the HttpOnly attribute. Public sources (NVD entry) describe remote exploitation potential and provide a firmware update from HPE as the remediation. The NVD CVSS v...

CVE-2021-26589

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE...

HPE Superdome Flex Server 跨站脚本漏洞

HPE Superdome Flex Server is a modular server product from Hewlett Packard Enterprise hpe. A cross-site scripting vulnerability exists in HPE Superdome Flex Servers that stems from a session cookie missing an HttpOnly attribute...

HPE Aruba ClearPass Policy Manager Information Disclosure Vulnerability

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.An information disclosure vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could exploit the vulnerability to access sensitive information, which could lead to elevated privileges...

HPE Aruba ClearPass Policy Manager Information Disclosure Vulnerability (CNVD-2021-80169)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.An information disclosure vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to access sensitive information in the web interface...

HPE Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2021-80166)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A remote command injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker can exploit this vulnerability to execute arbitrary commands...