CVE-2018-7092

A potential security vulnerability has been identified in HPE Intelligent Management Center Platform IMC Plat 7.3 E0506P09. The vulnerability could be remotely exploited to allow for remote directory traversal leading to arbitrary file deletion...

CVE-2018-7072

A remote bypass of security restrictions vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...

CVE-2016-4406

A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44...

CVE-2018-7091

HPE XP P9000 Command View Advanced Edition Software (CVAE) is affected by an open URL redirection vulnerability in CVAE 7.0.0-00 through versions prior to 8.60-00 for DevMgr, TSMgr and RepMgr. The issue is described across multiple sources (NVD, CNVD, CVE listing) as an open URL redirection flaw;...

CVE-2017-8968

A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 hprest-1.5-79.x8664.rpm, ilorest-2.0-403.x8664.rpm. The issue is resolved in iLOREST v2.1 or subsequent versions...

CVE-2018-7070

HPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2018-7069

HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2017-8990

CVE-2017-8990 affects Hewlett Packard Enterprise iMC Wireless Service Manager (WSM) Software prior to 7.3 E0506. The root cause is improper validation of the length of user-submitted data, leading to a remote code execution on vulnerable installations. Some sources describe a stack-based buffer o...

CVE-2018-7074

HPE Intelligent Management Center PLAT 7.3 E0506P07 contains a stack-based buffer overflow in the tftpserver handling of the m_pkg_LimitSize parameter, allowing remote code execution with SYSTEM privileges. The issue can be exploited without authentication; successful exploitation could run arbit...

CVE-2018-7073

A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...

CVE-2018-7068

HPE has identified a remote HOST header attack vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2017-8988

CVE-2017-8988 is a remote bypass of security restrictions impacting HPE XP Command View Advanced Edition Software older than 8.5.3-00. Affected components span DevMgr, RepMgr, and HDLM (Windows, Linux; HDLM also on Solaris/AIX). The vulnerability enables bypass of security checks at runtime, with...

CVE-2018-7073

CVE-2018-7073 affects HPE Moonshot Provisioning Manager prior to v1.24. It is a local arbitrary file modification vulnerability in the provisioning manager (component: Moonshot Provisioning Manager) where a local attacker could modify arbitrary files. CVSS shows base score 5.5 (Medium) with local...

CVE-2017-8968

CVE-2017-8968 affects HPE RESTful Interface Tool versions 1.5 and 2.0. A privilege-granting and access-control vulnerability allows remote attackers to execute arbitrary code, as described in CNVD-2019-03323, with the issue fixed in iLOREST v2.1 and later.

CVE-2018-7078

A remote code execution was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than version v2.60 and HPE Integrated Lights-Out 5 iLO 5 earlier than version v1.30...

CVE-2017-8987

CVE-2017-8987 affects HPE Integrated Lights-Out 3 (iLO 3). The vulnerability is an unauthenticated remote DoS in firmware version v1.88, with a fix in iLO3 v1.89 and newer. Exploitation can render the device unresponsive, impacting availability; no other impacts are indicated. Remediation: upgrad...

CVE-2018-7070

The CVE-2018-7070 entry affects HPE CentralView Fraud Risk Management (older than CV 6.1). Root cause: remote information disclosure vulnerability. Impact: partial confidentiality loss via remote access vectors; no integrity/availability impact stated. Affected product versions: pre-6.1 CV; fixed...

CVE-2017-8992

HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2018-7072

CVE-2018-7072 affects HPE Moonshot Provisioning Manager prior to v1.24. Multiple sources (NVD entry; CNVD-2019-03329) describe a remote bypass of security restrictions in the product. The vulnerability is exposed remotely (no authentication required per CVSS) and can allow bypass of protection me...

CVE-2017-8991

HPE has identified a cross site scripting XSS vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...