CVE-2023-50274

HPE OneView may allow command injection with local privilege escalation...

Command injection

HPE OneView may allow command injection with local privilege escalation...

Authentication flaw

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...

CVE-2023-6573

HPE OneView may have a missing passphrase during restore...

CVE-2023-6573

Summary: CVE-2023-6573 affects Hewlett Packard Enterprise OneView due to a missing passphrase during the restore process. The NVD entry assigns a CVSSv3.1 base score of 5.5 (Medium) with Local attack vector, Low attack complexity, no privileges required, and user interaction needed; confidentiali...

CVE-2023-6573

HPE OneView may have a missing passphrase during restore...

CVE-2023-50275

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...

CVE-2023-50275

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...

CVE-2023-50275

HPE OneView’s clusterService exposes an authentication bypass that can be exploited remotely to cause DoS. The vulnerability arises from inadequate validation of the attacker’s IP, exposing a function intended for loopback-only use, enabling a denial-of-service without authentication. Affected pr...

CVE-2023-50274

HPE OneView may allow command injection with local privilege escalation...

CVE-2023-50274

HPE OneView may allow command injection with local privilege escalation...

CVE-2023-50274

CVE-2023-50274 affects Hewlett Packard Enterprise OneView. The confirmed issue is a command injection with local privilege escalation. The explicit root cause described by the connected ZDI advisory is a flaw in the startUpgradeCommon method where a user-supplied string is not properly validated ...

Hewlett Packard Enterprise OneView Security Breach

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView that originates from a command injection that may be allowed via local privilege...

Hewlett Packard Enterprise OneView Security Breach

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView that stems from the potential loss of passwords during the recovery process...

CVE-2023-50275: Improper Authentication

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...

PT-2024-15011 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue is related to a missing passphrase during the restore process. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2023-6573: Insufficiently Protected Credentials

HPE OneView may have a missing passphrase during restore...

Hewlett Packard Enterprise OneView Security Breach

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise USA that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView that originates from a vulnerability that could allow authentication to be...

CVE-2023-50274: Improper Neutralization of Special Elements used in a Command

HPE OneView may allow command injection with local privilege escalation...

HPESBGN04586 rev.3 - HPE OneView, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege, Server-Side Request Forgery SSRF; Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - All versions prior to 8.70 and all 6.6 LTS versions prior to 6.60.07 CVSS Scores...