HPESBHF04209 rev.1 - HPE ProLiant and Apollo Gen10 and Gen10 Plus Servers Using Certain AMD EPYC Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Authentication Bypass, Denial of Service DoS, Disclosure of Information, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Server - Prior to version 2.52 HPE ProLiant DL325 Gen10 Plu...

HPESBHF04133 rev.2 - HPE ProLiant Servers, Apollo Products, Moonshot and Edgeline Blades, and Storage Products with Integrated Lights-Out 5 (iLO 5), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to version 2.44 HPE 3PAR Service Processor ...

HPESBHF04070 rev.4 - HPE ProLiant Servers, Apollo Products, Converged Systems, and Storage Products with Integrated Lights-Out 5, Integrated Lights-Out 4, or Integrated Lights-Out 3, Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v2.33 HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.77 HPE Integrated Lights-Out 3 iLO 3 - Prior to v1.94 HPE...

HPESBHF04069 rev.4 - HPE ProLiant Servers, Apollo Products, Converged Systems, and Storage Products with Integrated Lights-Out 5 (iLO 5) or Integrated Lights-Out 4 (iLO 4), Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v2.31 HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.76 HPE ConvergedSystem 700 CS700 - Varies, based on...

HPESBHF04057 rev.3 - HPE Servers with Certain Intel Processors, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL120 Gen10 Server Prior to System ROM v2.40 HPE ProLiant DL160 Gen10 Server Prior to System ROM v2.40 HPE ProLiant DL180 Gen10 Server Prior to System ROM v2.40...

HPESBHF04012 rev.7 - HPE ProLiant Servers, Apollo Products, and Converged Systems with Integrated Lights-Out 5 (iLO 5), Integrated Lights-Out 4 (iLO 4), or Integrated Lights-Out 3 (iLO 3), Ripple20 Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Sensitive Information, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers -Prior to v2.18 - Prior to...

HPESBHF03971 rev.6 - HPE ProLiant and Superdome Flex Servers using certain Intel Processors, SMM and TXT, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4500 System - Prior to v2.22 HPE Apollo 4200 Gen10 Server - Prior to v2.22 HPE Apollo 2000 System - Prior to v2.22 HPE ProLiant BL460c Gen10 Server Blade - Prior to...

CVE-2018-7117

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 iLO 5 for Gen10 ProLiant Servers earlier than version v1.40...

CVE-2018-7117

CVE-2018-7117 is a remote Cross-Site Scripting (XSS) vulnerability in HP iLO 5 Web UI for Gen10 ProLiant Servers, affecting versions earlier than v1.40. Root cause: improper input validation in the web interface leading to script execution. Affected component: iLO 5 Web User Interface. Exploitati...

CVE-2018-7117

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 iLO 5 for Gen10 ProLiant Servers earlier than version v1.40...

HPESBHF03869 rev.1 - HPE Windows Firmware Installer for certain HPE Gen9,Gen8, G7, and G6 Servers, Local Disclosure of Privileged Information

Potential Security Impact: Local: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 2 iLO 2 Firmware for ProLiant G6 Servers - Prior to v2.33 HPE Integrated Lights-Out 3 iLO 3 Firmware for ProLiant G7 Servers - Prior to...

HPESBHF03798 rev.1 - HPE Proliant Gen10 Servers, DL20 Gen9, ML30 Gen9 and Certain Apollo Servers Using Intel Server Platform Service (SPS) v4.0, Local Denial of Service and Execution of Arbitrary Code

Potential Security Impact: Local: Denial of Service DoS, Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 System ROM firmware prior to v1.26 HPE Apollo 4510 System ROM firmware prior to v1.26 HPE Apollo 6000 DLC System ROM firmware prior ...

HP System Management Homepage iprange parameter command execution

Added: 04/12/2013 BID: 58817 OSVDB: 91812 Background HP System Management Homepage SMH is a web-based interface that consolidates the management of ProLiant and Integrity servers. Problem A vulnerability in HP SMH allows command execution when an attacker requests /proxy/DataValidation with a...

HP System Management Homepage iprange parameter command execution

Added: 04/12/2013 BID: 58817 OSVDB: 91812 Background HP System Management Homepage SMH is a web-based interface that consolidates the management of ProLiant and Integrity servers. Problem A vulnerability in HP SMH allows command execution when an attacker requests /proxy/DataValidation with a...

HP System Management Homepage < 2.1.12 Unspecified XSS

The remote host appears to be running HP System Management Homepage SMH, a web-based management interface for ProLiant and Integrity servers. The version of HP SMH installed on the remote host fails to sanitize user input to an unspecified parameter and script before using it to generate dynamic...

CVE-2008-0708

HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...

Default credentials

HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...

CVE-2008-0708

HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...

CVE-2008-0708

CVE-2008-0708 relates to HP USB 2.0 Floppy Drive Key options (1) 442084-B21 and (2) 442085-B21 for certain HP ProLiant servers, where worms W32.Fakerecy and W32.SillyFDC may be launched if the server lacks up-to-date detection. The connected documents confirm the affected products and the malware...

CVE-2008-0708: Undefined Security Weakness

HP USB 2.0 Floppy Drive Key product options 1 442084-B21 and 2 442085-B21 for certain HP ProLiant servers contain the a W32.Fakerecy and b W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection...