CVE-2016-8534

A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2016-8515

CVE-2016-8515 is a remote vulnerability in HP Version Control Repository Manager (VCRM) prior to version 7.6.0 that allows an attacker to upload arbitrary files. The connected documents consistently describe this as a vulnerability in VCRM versions before 7.6.0. The exact root cause details are n...

CVE-2016-8513

CVE-2016-8513 describes a CSRF vulnerability in HPE Version Control Repository Manager (VCRM) affecting all versions prior to 7.6. A remote attacker could exploit this by convincing a user to follow a crafted link or HTML page to perform unauthorized actions. The vulnerability’s impact is indicat...

CVE-2016-8520

CVE-2016-8520 affects HPE Helion Eucalyptus (v4.3.0 and earlier). The root cause is improper IAM permission checks when accessing versioned S3 objects and ACLs, enabling in some cases authenticated users with S3 permissions to access versioned data. The NVD entry documents a network-vector, low c...

CVE-2017-5788

CVE-2017-5788 is a local information-disclosure vulnerability affecting HPE NonStop Software Essentials versions T0894 to T0894H02^AAI. The issue, documented in multiple sources, allows a local attacker to obtain sensitive information from the affected system. Per the NVD entry, the CVSS-2 base s...

CVE-2017-5795

CVE-2017-5795 affects HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06. The vulnerability resides in FileDownloadServlet, where insufficient validation/sanitization of the fileName parameter allows directory traversal, enabling remote disclosure of arbitrary files. ZDI notes that exploit...

CVE-2017-5814

CVE-2017-5814 is a remote SQL injection authentication bypass affecting HPE Network Automation versions 9.1x, 9.2x, 10.0x, 10.1x and 10.2x. The vulnerability stems from a SQL injection flaw used to bypass authentication, enabling an attacker to potentially access the application and back-end data...

CVE-2017-5796

The CVE-2017-5796 entry concerns a remote Cross-Site Request Forgery (CSRF) vulnerability in HPE 2620 Series Network Switches, specifically version RA.15.05.0006. Public sources in the connected documents describe an issue where HTTP requests are not properly validated, enabling an attacker to pe...

CVE-2017-5781

CVE-2017-5781 is a CSRF vulnerability affecting Hewlett Packard Enterprise Matrix Operating Environment (MEO) software and Systems Insight Manager (SIM) Software version 7.6. CNVD-2018-05098 states a cross-site request forgery flaw in MEO v7.6 and SIM v7.6, enabling a remote attacker to perform u...

CVE-2017-5822

CVE-2017-5822 affects HPE Intelligent Management Center (iMC) PLAT v7.3 E0504P04. The vulnerability resides in the dbman service, where handling of opcode 10010 requests can lead to arbitrary file writes and remote code execution with SYSTEM privileges. Multiple connected advisories describe unau...

CVE-2017-5829

An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5784

CVE-2017-5784 : A missing HSTS header vulnerability affects Hewlett Packard Enterprise’s Matrix Operating Environment (MOE) version 7.6. The CVE entry notes HSTS misconfiguration as the underlying issue, with CVSS metrics indicating a Medium severity (CVSSv2 base 5.8, CVSSv3 base 6.5). Connected ...

CVE-2017-5780

CVE-2017-5780 concerns a remote clickjacking vulnerability in Hewlett Packard Enterprise’s HPE Matrix Operating Environment (MEO) software. Connected data confirms the affected components are HPE Matrix Operating Environment Software (v7.6) and Systems Insight Manager (SIM) Software (v7.6). The r...

CVE-2017-12490

CVE-2017-12490 is a remote code execution vulnerability in Hewlett Packard Enterprise’s HPE iMC PLAT 7.3 (E0504). The issue is described as an Expression Language injection in perfSelInsServer.gwtsvc (getSelInsBean) that could enable an attacker to execute arbitrary code. Exploitation is remote; ...

CVE-2017-12548

A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...

CVE-2017-12535

HP iMC PLAT (HPE Intelligent Management Center) is affected by CVE-2017-12535 via a Remote Code Execution vulnerability in the ictExpertCSVDownload feature. The root cause is an Expression Language Injection in the ictExpertCSVDownload.xhtml handling of the beanName parameter within the SyslogIct...

CVE-2017-12546

HP System Management Homepage (SMH) before version 7.6.1 is affected by a local buffer overflow vulnerability in its web interface. The issue can allow arbitrary code execution or a denial of service when an attacker logs in to the affected system. Remediation: upgrade SMH to version 7.6.1 or new...

CVE-2017-12518

CVE-2017-12518 is a remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504) that can be exploited over the network with low attack complexity and no user interaction; it allows code execution with privileges, and is fixed in PLAT v7.3 (E0506) or later. Some...

CVE-2017-12512

CVE-2017-12512 is a remote code execution vulnerability in Hewlett Packard Enterprise iMC PLAT version 7.3 (E0504) that could be exploited remotely over the network with low attack complexity and no user interaction. The issue is fixed in PLAT 7.3 (E0506) or later. CVSSv3 indicates a high impact ...

CVE-2017-12538

CVE-2017-12538 describes a Remote Code Execution in Hewlett Packard Enterprise’s Intelligent Management Center (iMC) PLAT, specifically version PLAT 7.3 (E0504). The issue enables an attacker to run arbitrary code on the target through flaws in iMC PLAT, with the impact noted as high (C/H/I/A) in...