CVE-2018-7113

A security vulnerability in HPE Integrated Lights-Out 5 iLO 5 prior to v1.37 could be locally exploited to bypass the security restrictions for firmware updates...

CVE-2018-7115

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to a remote buffer overflow in dbman.exe opcode 10001 on Windows. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

CVE-2018-7115

CVE-2018-7115 affects HPE Intelligent Management Center (iMC) PLAT before 7.3 E0605P06. A remote buffer overflow in dbman.exe (opcode 10001) on Windows is exploitable from unauthenticated remote vectors. Per connected advisories, the overflow can be triggered via crafted requests and could lead t...

CVE-2018-7116

CVE-2018-7116 affects HPE Intelligent Management Center (iMC) PLAT prior to 7.3 E0605P06. The vulnerability lies in the dbman process, where improper validation of the length of user-supplied data in a Filename-related request can be exploited remotely to cause a denial of service. Affected versi...

CVE-2018-7113

A security vulnerability in HPE Integrated Lights-Out 5 iLO 5 prior to v1.37 could be locally exploited to bypass the security restrictions for firmware updates...

CVE-2018-7116

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

CVE-2018-7112

The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which...

CVE-2018-7114

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to remote buffer overflow in dbman leading to code execution. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

CVE-2018-7113

CVE-2018-7113 affects HP’s Integrated Lights-Out 5 (iLO 5) prior to v1.37. The issue allows local attack to bypass firmware-update security restrictions, enabling unauthorized firmware updates. Affected component: iLO 5 firmware management; root cause: local bypass of update restrictions; impact:...

CVE-2018-7114

HPE/iMC (HP/H3C Intelligent Management Center) PLAT before 7.3 E0605P06 is vulnerable to a stack-based buffer overflow in the dbman component when processing decryption/requests, leading to remote code execution or crashes. Affected product: iMC PLAT versions prior to 7.3 E0605P06. Root cause: im...

CVE-2018-7112

The CVE-2018-7112 flaw affects HPE ProLiant servers (Gen9/Gen8, G7, G6) via the Windows firmware installer and related system ROM/iLO components. Root cause: local disclosure of privileged information due to the HPE Windows firmware installer. Remediation: updated firmware installers released in ...

HPE Moonshot Provision Manager Detection (HTTP)

Detection of HPE Moonshot Provision Manager. The script sends a connection request to the server and attempts to detect HPE Moonshot Provision Manager. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

HPE System Management Homepage Issue (CVE-2017-12544) - Ver2

A vulnerability exists in HPE System Management Homepage. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

HPE Lights-Out Authentication Bypass (CVE-2017-12542)

An authentication bypass vulnerability exists in HPE Lights-Out. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Moderate: Red Hat Security Advisory: openstack-cinder security and bug fix update

An update for openstack-cinder is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

HPESBHF03874 rev.1 - Certain HPE Products using Intel-based Processors, L1 Terminal Fault (L1TF) Speculative Side-channel Vulnerabilities, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL580 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL560 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL380 Gen10 Server - Pri...

Remote code execution

A remote code execution vulnerability was identified in HPE Intelligent Management Center iMC prior to iMC PLAT 7.3 E0605P04...

CVE-2018-7111

A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users...

Design/Logic Flaw

A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users...

CVE-2018-7111

A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users...