CVE-2017-8960

An Authentication Bypass vulnerability in HPE MSA 1040 and MSA 2040 SAN Storage IN version GL220P008 and earlier was found...

CVE-2017-12513

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8978

A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found...

CVE-2017-12488

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12500

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8973

An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...

CVE-2017-5817

HPE iMC PLAT 7.3 E0504P04 contains a Remote Code Execution via the dbman RestoreDBase opcode 10007. The vulnerability arises from improper validation of user-supplied input in RestoreDBase handling, allowing unauthenticated remote attackers to inject commands and execute arbitrary OS commands wit...

CVE-2016-8514

A remote information disclosure in HPE Version Control Repository Manager VCRM was found. The problem impacts all versions prior to 7.6...

CVE-2017-5810

CVE-2017-5810 is a remote SQL injection in HP Network Automation, affecting 9.1x, 9.2x, 10.0x, 10.1x and 10.2x. The issue arises in the RedirectServlet due to insufficient sanitization of certain HTTP request parameters, enabling an unauthenticated or remote attacker to inject SQL and potentially...

CVE-2017-12521

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12521

CVE-2017-12521 is a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) . The issue is resolved in PLAT v7.3 (E0506) or any subsequent version. Affected software/versions and the exact root cause are described in the CVE entry; the connected sources cor...

CVE-2017-12506

CVE-2017-12506 describes a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) that is fixed in PLAT 7.3 (E0506) or later. Connected sources (e.g., ZDI-17-669) corroborate an RCE in iMC with network access as the attack vector; CVSSv3 base 8.8 (HIGH) wi...

CVE-2017-8974

A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL was found...

CVE-2017-5780

A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-12514

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12554

A remote code execution vulnerability in HPE intelligent Management Center iMC PLAT iMC Plat 7.3 E0504P2 and earlier was found...

CVE-2016-8523

CVE-2016-8523 describes a remote code execution in HP/ Hewlett Packard Enterprise Smart Storage Administrator (SSA) prior to version 2.60.18.0. The root cause is a flaw in isDirectFileAccess (ipcelmclient.php) that allows an attacker–via a crafted HTTP request–to trigger a proc_open() path, enabl...

CVE-2017-12544

CVE-2017-12544 concerns HPE System Management Homepage (SMH) prior to version 7.6.1, where a cross-site scripting (XSS) vulnerability allows an attacker to execute arbitrary script in a user’s browser (in the context of the affected site) and could enable cookie-based credential theft. The Nuclei...

CVE-2016-8519

CVE-2016-8519 describes a remote code execution vulnerability in Hewlett Packard Enterprise Operations Orchestration (HPE OOE) Community and Enterprise editions, prior to version 10.70. The flaw resides in the wsExecutionBridgeService servlet, where improper validation of user-supplied data and i...

CVE-2017-12492

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...