448 matches found
CVE-2025-37101
CVE-2025-37101 concerns HPE OneView for VMware vCenter (OV4VC). The available documents confirm a vulnerability where an attacker with read-only privileges can perform vertical privilege escalation, enabling admin actions. The CVSS 3.1 score is 8.7 (HIGH): attack vector NETWORK, attack complexity...
PT-2025-26933 · Hewlett Packard · Hpe Oneview For Vmware Vcenter
Name of the Vulnerable Software and Affected Versions: HPE OneView for VMware vCenter OV4VC affected versions not specified Description: A potential security issue has been identified that could allow an attacker with read-only privileges to perform vertical privilege escalation, enabling them to...
CVE-2025-37101: Improper Privilege Management
A potential security vulnerability has been identified in HPE OneView for VMware vCenter OV4VC. This vulnerability could be exploited allowing an attacker with read only privilege to cause Vertical Privilege Escalation operator can perform admin actions...
Hewlett Packard Enterprise OneView for VMware vCenter 安全漏洞
Hewlett Packard Enterprise OneView for VMware vCenter is a VMware vCenter server management software plug-in for managing HPE ProLiant servers and storage systems from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise OneView for VMware vCenter, which...
HPESBGN04876 rev.2 - HPE OneView for VMware vCenter (OV4VC) and Compute Ops Management plug-in for VMware vCenter (COM4VC), Local Elevation of of Privilege
Potential Security Impact: Local: Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView for VMware vCenter with Operations Manager and Log Insight - All versions prior to v11.7 HPE Compute Ops Management - All versions prior to v1.4 CVSS Scores: | CVE ...
HPESBGN04853 rev.1 - HPE OneView, Multiple Local and Remote Vulnerabilities
Potential Security Impact: Local: Denial of Service DoS, script injection; Remote: Code Execution, Disclosure of Information, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - All versions prior to v10.00 CVSS Scores: | CVE | CVSS Vecto...
CVE-2023-28086
An HPE OneView appliance dump may expose proxy credential settings...
CVE-2023-30908
A remote authentication bypass issue exists in a OneView API...
CVE-2023-30912
A remote code execution issue exists in HPE OneView...
CVE-2023-28091
HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump...
CVE-2023-28084
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens...
CVE-2023-28090
An HPE OneView appliance dump may expose SNMPv3 read credentials...
CVE-2023-28089
An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules...
CVE-2023-28088
An HPE OneView appliance dump may expose SAN switch administrative credentials...
CVE-2023-28087
An HPE OneView appliance dump may expose OneView user accounts...
CVE-2023-28085
An HPE OneView Global Dashboard OVGD appliance dump may expose OVGD user account credentials...
CVE-2022-28625
A local disclosure of sensitive information vulnerability was discovered in HPE OneView versions: Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability...
CVE-2022-28616
A remote server-side request forgery ssrf vulnerability was discovered in HPE OneView versions: Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView...
CVE-2022-28617
A remote bypass security restrictions vulnerability was discovered in HPE OneView versions: Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView...