CVE-2017-8979

Security vulnerabilities in the HPE Integrated Lights-Out 2 iLO 2 firmware could be exploited remotely to allow authentication bypass, code execution, and denial of service...

CVE-2017-8959

An Authentication Bypass vulnerability in HPE MSA 1040 and HPE MSA 2040 SAN Storage in version GL220P008 and earlier and was found...

CVE-2017-12561

CVE-2017-12561 is a remote code execution flaw in HP/HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P4 and earlier. The ZDI advisory details a use-after-free in the dbman service (listening on TCP port 2810) where a crafted opcode 10012 message can reuse a freed pointer to execute arbitrar...

CVE-2017-8993

A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management PPM version v9.30, v9.31, v9.32, v9.40 was found...

CVE-2017-12489

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8956

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 was found...

CVE-2017-8947

A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found...

CVE-2017-12493

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12497

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12516

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12495

CVE-2017-12495 affects Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT 7.3 (E0504). The issue is a Remote Code Execution vulnerability exploitable remotely over the network with low privileges and no user interaction, leading to complete confidentiality, integrity, and avail...

CVE-2017-8984

CVE-2017-8984 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P03. Multiple sources (NVD, CVE lists, CNVD) describe a remote code execution vulnerability in iMC PLAT, enabling an attacker to run commands with SYSTEM/root privileges and potentially write or delete arbitrary files. CV...

CVE-2017-8972

A clickjacking vulnerability affects HP Matrix Operating Environment (Matrix OE) 7.6 LR1. The CVE-2017-8972 entry notes a clickjacking flaw; NVD data shows CVSS scores (2.0: 4.0, 3.0: 4.3) with network access and low complexity. Connected documents also describe the same issue across multiple sou...

CVE-2017-8976

A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found...

CVE-2017-8993

CVE-2017-8993 is a remote Cross-Site Scripting vulnerability in Hewlett Packard Enterprise (HPE) Project and Portfolio Management Center (PPM). Affected are HPE PPM versions v9.30, v9.31, v9.32 and v9.40. The root cause reported across sources is inadequate input filtering of user-supplied data, ...

CVE-2017-8951

HPE SiteScope 11.2x/11.3x contains an information-disclosure vulnerability (CVE-2017-8951). Credentials stored in Credential Profiles can be sent in plaintext over HTTP to the client, enabling potential disclosure. CERT/CC notes mitigation via updates, TLS/SSL enforcement, and restricted access; ...

CVE-2017-8953

CVE-2017-8953 describes a remote Cross-Site Scripting (XSS) vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center v12.53 and earlier. The root cause is improper input filtering of user-submitted content, allowing attacker-controlled input to be reflected in a vulnerable co...

CVE-2017-8949

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2016-8530

A remote Denial of Service vulnerability affects HPE iMC PLAT versions v7.2 E0403P06 and earlier . The issue is resolved in iMC PLAT 7.3 E0504 or later. Connected sources describe a DoS condition with a fixed version; no additional exploitation details are provided in the available documents.

CVE-2016-8529

CVE-2016-8529 describes a Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier. The issue is resolved in LeftHand OS v12.6 or any subsequent version. Affected products include StoreVirtual 400...