HPESBNW04391 rev.2 - AirWave Management Platform, Multiple Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform - 8.2.15.0 and below CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-37916 |...

HPESBMU04392 rev.1 - HPE IceWall Products, Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE IceWall Federation - 4.0 RHEL 8 and Windows - SAML IdP, Office 365 module, OIDC RP and OIDC OP. IceWall Gen11 Password Reset Option - 11.0 RHEL 8 and Windows IceWall...

HPESBST04384 rev.2 - HPE B-series SAN Switches with Brocade Fabric OS (FOS), Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass, Unqualified Configuration Change SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SN8000B 4-slot SAN Director Switch - v8.x prior to v8.2.3c1 HPE SN8000B 8-slot SAN Director Switch - v8.x prior to v8.2.3c1 HPE SN8600B...

HPESBHF04314 rev.4 - HPE Superdome Flex, Superdome Flex 280, Integrity MC990 X, SGI UV 300 Servers and SGI UV 3000 Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity MC990 X Server - Prior to 5.2.16 BIOS in product bundle 2022.06 - Impacted by CVE-2021-0154, CVE-2021-0155, CVE-2021-0189 HPE Superdom...

HPESBST04261 rev.1 - HPE B-Series SANnav Management Software - Security Advisory for Apache Log4j Vulnerability

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav Management Software 2.2.0, 2.1.1.x including patches 2.1.1.1 - 2.1.1.6, 2.1.0x including patch 2.1.0a and 2.0.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- ...

HPESBHF04251 rev.2 - HPE Gen10 and Gen10 Plus Synergy Servers Using Integrated Lights-Out 5 (iLO 5), Remote Buffer Overflow

Potential Security Impact: Remote: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Compute Module - Prior to iLO 5 v2.60a HPE Synergy 660 Gen10 Compute Module - Prior to iLO 5 v2.60a HPE Synergy 480 Gen10 Plus Compute Module - Prior to iLO 5...

HPESBHF04208 rev.1 - HPE ProLiant, Apollo, Edgeline, and Synergy Servers Using Certain Intel Processors, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 System - Prior to 2.5610-28-2021 8 Nov 2021 HPE Apollo 4200 Gen10 Server - Prior to 2.5610-28-2021 8 Nov 2021 HPE Apollo 6500 Gen10 System - Prior to...

HPESBST04176 rev.1 - HPE StoreOnce, Remote DOM-based Cross Site Scripting

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreOnce 5200 FW version: 4.2.3 and earlier HPE StoreOnce 5650 FW version: 4.2.3 and earlier HPE StoreOnce 5250 FW version: 4.2.3 and earlier HPE StoreOnce 3640 FW...

HPESBNW04185 rev.2 - HPE Aruba AOS-CX Switch Series, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Bypass Security Restrictions, Cross-Site Scripting XSS; Remote: Disclosure of Information, Execution of Arbitrary Commands SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 8400 Switch Series 10.04.xxxx - versions prior to 10.04.3070, 10.05.xx...

HPESBST04169 rev.1 - HPE Simplivity 380 Gen10 Systems Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to version 2.50 HPE SimpliVity 380 Gen10 G - Prior to version 2.50 HPE SimpliVity 2600 Gen10...

HPESBST04178 rev.1 - HPE SimpliVity Systems using VMware, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 2600 Gen10 - All active versions HPE SimpliVity 2600 - All active versions HPE SimpliVity 325 - All active versions HPE SimpliVity 380 Gen10 - All active versions HPE...

HPESBUX04128 rev.1 - HP-UX BIND, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Multiple Vulnerabilities, Unauthorized Access, Unauthorized Identification of Valid Users, Buffer Overflow, Access of Resource Using Incompatible Type 'Type Confusion' CWE-843; Remote: Denial of Service DoS, Unauthorized Access, Buffer...

HPESBUX04114 rev.1 - HP-UX 11iv3 Tomcat-based Servlet Engine7.0.104.01. Multiple Remote Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Privileged Information; Remote: Code Execution, Denial of Service DoS, Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Tomcat-based Servlet v.7.x Engine D.7.0.104.01 a...

HPESBGN04063 rev.1 - HPE Edgeline Infrastructure Manager, Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline Infrastructure Management Software - Prior to 1.21 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7199 |...

HPESBNW04051 rev.2 - Aruba AirWave Glass, Multiple Vulnerabilities

Potential Security Impact: Remote: Escalation of Privilege, Execution of Arbitrary Commands, Unauthenticated Arbitrary Code Execution, Unauthorized Access, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Airwave Software - Prior to 1.3.2 CVSS...

HPESBST04045 rev.2 - HPE 3Par and Primera StoreServ Management Console (SSMC), Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR StoreServ Management and Core Software Media All versions prior to 3.7.1.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7197 |...

HPESBGN04037 rev.1 - HPE Utility Computing Service (UCS) Meter, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Directory Traversal, Unauthenticated Arbitrary Code Execution, Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Pay per use PPU 1.9 - HPE UCS Meter CVSS Scores: | CVE | CVSS Vector | Base Score | | ---...

HPESBGN04024 rev.2 - Hewlett Packard Enterprise Universal API Framework for VMware ESXi (OVA) and Microsoft Hyper-V (VHD), Remote SQL Injection Information Disclosure Vulnerability

Potential Security Impact: Remote: SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Universal API Framework for VMware ESXi OVA - Prior to v2.5.2 HPE Universal API Framework for Microsoft Hyper-V VHD - Prior to v2.5.2 CVSS Scores: | CVE | CVSS Vector | Base Score ...

HPESBNW04033 rev.3 - Aruba Analytics and Location Engine (ALE), Authenticated Arbitrary File Modification

Potential Security Impact: Remote: Arbitrary File Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Services Usage Licenses 2.1.0.2 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7119 |...

HPESBHF04031 rev.3 - HPE Integrated Lights-Out 3 (iLO 3) for Integrity Servers, Ripple20 Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Sensitive Information, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Integrity Superdome 2 Server -Prior to bundle 4.2.66 HPE Integrity rx2800 i2 Server -Prior to bundle 30.00 HPE...

HPESBUX04025 rev.1 - HP-UX Secure Shell Daemon, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Command Execution, Arbitrary File Modification, Authentication Bypass, Authorized User SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX 11i Secure Shell Software A.07.40.003 and earlier are impacted CVSS...

HPESBNW04016 rev.2 - HPE Aruba Clearpass Manager, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Cross-Site Scripting XSS; Remote: Authentication Bypass, Code Execution, Unauthorized Information Disclosure SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager 6.8.x prior to 6.8.4 and 6.7.x prior to 6.7.13 CVSS Scores:...

HPESBNW04010 rev.3 - HPE and Aruba L2/L3 Switches, Ripple20 Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Sensitive Information, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 5400R zl2 Switch Series -Prior to KB.16.08.0014, KB.16.09.0012, KB.16.10.0009 Aruba 3810M...

HPESBHF04004 rev.1 - HPE Superdome Flex Server Remote Management Controller (RMC), Local Elevation of Privilege

Potential Security Impact: Local: Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server Prior to 3.25.46 12 May 2020 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7137 |...

HPESBHF03945 rev.1 - HPE Servers using Supplemental Update / Online ROM Flash Component for Linux, Local Execution of Arbitrary Code.

Potential Security Impact: Local: Execution of Arbitrary Code With Privilege Elevation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Service Pack for ProLiant 2018.06.0, 2018.09.0, 2018.11.0 - Only applies to Linux firmware installer HPE SATA Read Intensive Solid State Drive...

HPESBNS03976 rev.1 - HPE NonStop using Sudo

Potential Security Impact: Local: Bypass Security Restrictions SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. OSS Core Utilities T1202 T1202L02, T1202L02^AAN, T1202AAO, T1202L02^AAQ, T1202L02^AAR, T1202L01^AAJ, T1202J01, T1202J01^AAP, T1202H01^AAL CVSS Scores: | CVE | CVSS Vector...

HPESBHF03971 rev.6 - HPE ProLiant and Superdome Flex Servers using certain Intel Processors, SMM and TXT, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4500 System - Prior to v2.22 HPE Apollo 4200 Gen10 Server - Prior to v2.22 HPE Apollo 2000 System - Prior to v2.22 HPE ProLiant BL460c Gen10 Server Blade - Prior to...

HPESBST03946 rev.1 - HPE 3PAR StoreServ Management Console (SSMC), Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Cross-Site Scripting XSS, Unauthorized Information Disclosure, Session Reuse, script injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR StoreServ Management and Core Software Media prior to 3.5.0.1 CVSS...

HPESBHF03932 rev.2 - HPE Products using certain Intel UEFI Reference Code, Local Escalation of Privilege, Denial of Service Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Server Firmware prior to 2.04 04/18/2019 HPE ProLiant DL160 Gen10 Server Firmware prior to 2.04 04/18/2019 HPE ProLiant DL180...

HPESBUX03909 rev.1 - HP-UX Web Server Suite running Apache on HP-UX 11iv3, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Data Injection, Unauthorized Read Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Apache-based Web Server B.11.31 - httpd prior to B.2.4.18.04 CVSS Scores: | CVE | CVSS Vector | Base Score ...

HPESBST03884 rev.2 - HPE ConvergedSystem 700 Solutions Using HPE 3PAR Service Processor, Multiple Vulnerabilities

Potential Security Impact: Local: Directory Traversal, Disclosure of Privileged Information; Remote: Access Restriction Bypass, Code Execution, Cross-Site Request Forgery CSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors - Prior to SP-4.4.0.GA-110MU7...

HPESBHF03875 rev.1 - HPE Integrated Lights Out 4 and 5, (iLO 4, 5), Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 4 iLO 4 - Prior to 2.60 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to 1.30 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- ...

HPESBHF03802 rev.1 - HPE VSR Products (Virtual Services Router), Remotely Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 12500 Main Processing Unit with Comware v7 Operating System n/a - Onle CW7 VSR products CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-9191 |...

HPESBNS03827 rev.1 - HPE Nonstop Systems using NonStop SSL T0910, Local Unqualified Configuration Change

Potential Security Impact: Local: Unqualified Configuration Change SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop SSL T0910 L-Series: All versions prior to T0910L02^ABB; H-series and J-Series: All versions prior to T0910H01^ABD CVSS Scores: | CVE | CVSS Vector | Base Scor...

HPESBHF03819 rev.2 - HPE XP Storage using HGLM, Local Authentication Bypass

Potential Security Impact: Local: Authentication Restriction Bypass; Remote: Authentication Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Hitachi Dynamic Link Manager HDLM Software HGLM 6.3.0-00 to 8.5.2-00 CVSS Scores: | CVE | CVSS Vector | Base Score | | ---...

HPESBHF03815 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC 7.3 E0504P2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5792 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |...

HPESBHF03808 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC Plat 7.3 E0504P4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8983 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A...

HPESBNS03804 rev.1 - HPE NonStop Server, Local Authentication Restriction Bypass

Potential Security Impact: Local: Authentication Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop Servers L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL CVSS Scores: | CVE |...

HPESBMU03795 rev.1 - HPE Matrix Operating Environment, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Indirect Vulnerabilities, Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Matrix Operating Environment Software 7.6 LR1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-89...

HPESBHF03779 rev.1 - HPE Fabric OS using OpenSSH, Denial of Service

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. StoreFabric B-series Switches FOS prior to 7.4.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-6515 |...

HPESBST03780 rev.1 - HPE MSA 1040 and 2040 SAN Storage. Remote Escalation of Privilege, Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass, Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP MSA 2040 SAN Storage GL220P008 and earlier HP MSA 1040 SAN Storage GL220P008 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | -...

HPESBHF03705 rev.4 - HPE Integrated Lights-Out 4, 3, 2 and Moonshot Remote Console Administrator (iLO 4 and MRCA) Remote Disclosure of Information

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Remote Console Administrator Prior to 2.50 HP Integrated Lights-Out 4 iLO 4, Prior to 2.53 HP Integrated Lights-Out 3 iLO 3, Firmware for ProLiant G7 Servers Prior...

HPESBHF03770 rev.1 - HPE Comware 7 MSR Routers using PHP, Go, Apache Http Server, and Tomcat, Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products V7 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5385 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L | 5.6 | |...

HPESBHF03763 rev.1 - HPE Comware 7, IMC, VCX products using OpenSSL, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products See resolution section for impacted versions HP Intelligent Management Center iMC See resolution section for impacted versions VCX Products 9.8.19 CVSS...

HPESBGN03758 rev.2 - HPE UCMDB, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP UCMDB Configuration Manager Software - v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8947 |...

HPESBHF05163 rev.1 - HPE Integrated Lights-Out (iLO) 7 Using COM, User Validation Failure Vulnerability

Potential Security Impact: Remote: User Validation Failure SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 7 iLO 7 1.25.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-79820 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H ...

HPESBHF04938 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01313, 2025.3 IPU, Intel Xeon Processor Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to SimpliVity Support Pack Gen11 SVTSPGen11 20260116 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- ...

HPESBNW04832 rev.1 - HPE Telco Intelligent Assurance, Multiple Netty Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Intelligent Assurance FAS and PDO 4.2.8 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-24970 |...

HPESBNW04767 rev.1 - HPE Intelligent Assurance Using Apache, Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Assurance - Prior to v4.2.7 - HPE Telco INT-A FAS and PDO CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-47554 |...

HPESBNW04887 rev.1 - HPE Telco Service Activator, Protection Mechanism Failure

Potential Security Impact: Local: Input Validation; Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Activator 10.3.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-36843 |...