HPESBHF05069 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01419, 2026.2 IPU, Intel Trust Domain Extensions (Intel TDX) module Advisory

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 HFP 2026.05.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31356 |...

HPESBHF05068 rev.1 - HPE Cray XD670 Server Using AMI BIOS, Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Denial of Service DoS, Disclosure of Information, Escalation of Privilege, Unauthorized Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 HFP 2026.05.00 CVSS Scores: | CVE | CVS...

HPESBHF05066 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01396, 2026.1 IPU, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31648 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N | 3.9 |...

HPESBCR04982 rev.1 - HPE Cray XD670 Server Using UEFI, Multiple Vulnerabilities

Potential Security Impact: Local: Code Execution; Remote: Denial of Service DoS, Disclosure of Information, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to v2.06 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBCR04980 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01312, Intel TDX Module Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to v2.06 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-20613 |...

HPESBCR04979 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01280, 2025.3 IPU, Intel Chipset Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege; Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to v2.06 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBCR04981 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01313, 2025.3 IPU, Intel Xeon Processor Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to v2.06 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-20053 |...

EUVD-2024-19985

Malicious code in bioql PyPI...

EUVD-2025-12197

Malicious code in bioql PyPI...

EUVD-2022-33062

Malicious code in bioql PyPI...

HPESBCR04898 rev.1 - Certain HPE Cray XD Servers Using Certain TPM 2.0, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to TPM Firmware v7.86 June 13, 2025 HPE Cray XD675 - Prior to TPM Firmware v15.24 June 13, 2025 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --...

CVE-2024-51765

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on configuration, this vulnerability may lead to local/cluster unauthorized access...

CVE-2022-28620

A remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System Solutions; HPE Slingshot; and HPE Cray EX supercomputers versions: Prior to node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware...

CVE-2025-37088

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access...

CVE-2025-37088

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access...

CVE-2025-37088

A security vulnerability exists in HPE Cray Data Virtualization Service (DVS) , where specific race conditions and configuration issues can lead to unauthorized local or cluster access . The vulnerability is characterized as a concurrency issue involving shared resources with improper synchroniza...

CVE-2025-37088

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access...

CVE-2025-37088

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access...

PT-2025-17596 · Hewlett Packard · Hpe Cray Data Virtualization Service

Name of the Vulnerable Software and Affected Versions: HPE Cray Data Virtualization Service DVS affected versions not specified Description: A security issue has been identified in HPE Cray Data Virtualization Service DVS, which may lead to unauthorized local or cluster access under certain...

CVE-2025-37088: Concurrent Execution using Shared Resource with Improper Synchronization

A security vulnerability has been identified in HPE Cray Data Virtualization Service DVS. Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access...