HPESBST04311 rev.1 - HPE StoreOnce Software, SSH Server Supports Weak Key Exchange Algorithms

Potential Security Impact: Remote: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreOnce 3640 - Prior to 4.3.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-28622 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | 3.7 |...

HPESBHF04322 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX170r Gen10 server - Prior to 2.6605172022 - Use BIOS family U38. HPE ProLiant DX190r Gen10 server - Prior to 2.6605172022 - Use BIOS family U38. HPE ProLiant...

HPESBHF04325 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to System BIOS 1.6006012022 HPE Synergy 480 Gen10 Compute Module - Prior to System BIOS 2.6606012022 HPE Synergy 660 Gen10...

HPESBHF04320 rev.2 - Certain HPE ProLiant BL/DL/ML/XL/MicroServer and Apollo Servers Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Server - Prior to 2.6605172022 HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.6606012022 HPE ProLiant DL20 Gen10 Server - Prior to 2.5804142022 HP...

HPESBST04321 rev.1 - Certain HPE Storage Products Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1460 Storage - Prior to 2.6605172022 - Use BIOS family U32. HPE StoreEasy 1560 Storage - Prior to 2.6605172022 - Use BIOS family U33. HPE StoreEasy 1660 Expand...

HPESBMU04316 rev.1 - HPE IceWall Products Using Oracle Java SE, Remote Unauthorized Data Access or Data Modification.

Potential Security Impact: Remote: Unauthorized Data Access, Unauthorized Data Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall MFA 4.0 Enterprise Edition Windows/Oracle JDK 17.0.2 IceWall MFA 4.0 Standard Edition Windows/Oracle JDK 17.0.2 IceWall Gen11 Passwor...

HPESBHF04305 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Intel Software Guard Extensions (SGX), INTEL-SA-00614, 2022.1 IPU - Intel SGX Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Blade - Prior to H071.9604142022 HPE ProLiant m750 Server Blade - Prior to H091.5004152022 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...

HPESBST04276 rev.1 - HPE Nimble Storage, Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Nimble Storage Hybrid Flash Arrays 5.0.10.0 and earlier, 5.2.1.400 and earlier, and 5.3.1.0 and earlier Nimble Storage All Flash Arrays 5.0.10.0 and earlier, 5.2.1.400 a...

HPESBST04295 rev.1 - Certain HPE Storage Products Using Intel Xeon Processors, INTEL-SA-00616, 2022.1 IPU, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1460 Storage - Prior to 2.6404212022 - Use BIOS family U32 HPE StoreEasy 1560 Storage - Prior to 2.6404212022 - Use BIOS family U33 HPE...

HPESBST04294 rev.2 - Certain HPE Storage Products Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1460 Storage - Prior to 2.6605172022 - Use BIOS family U32. Addresses an incomplete fix for CVE-2021-0159, CVE-2021-33123, and...

HPESBNW04285 rev.4 - Aruba Products, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform 8.2.14.0 and below Aruba Fabric Composer 6.2.0 and below Aruba ClearPass Policy Manager 6.10.4 and below, 6.9.10 and below, 6.8.9 without Hotf...

HPESBUX04274 rev.1 - HP-UX RPC services library, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX 11i v3 ONC and NFS Software - Prior to B.11.31.23 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2007-5462 |...

HPESBST04272 rev.1 - HPE SimpliVity Omnistack for Hyper-V, Multiple Remote Samba Vulnerabilities

Potential Security Impact: Remote: Code Execution, Escalation of Privilege, Unauthorized Information Disclosure SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. SimpliVity Omnistack for HPE - Prior to v4.1.0U1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBST04273 rev.1 - HPE Nimble Storage, Local Bypass Security Restrictions

Potential Security Impact: Local: Bypass Security Restrictions SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Nimble Storage Hybrid Flash Arrays 5.0.10.0 and earlier Nimble Storage All Flash Arrays 5.0.10.0 and earlier Nimble Storage Secondary Flash Arrays 5.0.10.0 and earlie...

HPESBMU04275 rev.1 - HPE IceWall Products Using OpenSSL, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO certd 11.0 RHEL 7, 8 and Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-0778 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H ...

HPESBNW04271 rev.2 - HPE Aruba Networking Products, Multiple CVEs involving Spring Cloud and Spring Framework

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager none - no impact CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-22947 |...

HPESBNS04260 rev.1 - HPE Virtualized Converged NonStop X NS2 VHOST CLIMs Using PolKit's Pkexec Utility, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. CLIM DVD Installation Software T0853 T0853L03^DBA - T0853L03^DCH CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-4034 |...

HPESBNS04250 rev.1 - HPE Samba on NonStop, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Elevation of Privilege, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop T1201L02, T1201L02^AAR, T1201L02^AAS; T120L01 - T1201L01^AAO; T1201J01, T1201J01^AAT; T1201H01 -...

HPESBNW04237 rev.4 - HPE Aruba Analytics and Location Engine, Aruba Central On Prem (COP), and Aruba ClearPass Policy Manager, PwnKit (Polkit) Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Engine 2.2.0.1 and below Aruba ClearPass Policy Manager 6.10.3 and all previous versions Aruba Central On-Premises 2.5.x.x: 2.5.4.2 and below CVSS...

HPESBGN04233 rev.1 - HPE Agentless Management Service for Windows, Unquoted Search Path

Potential Security Impact: Local: Unquoted Search Path SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Agentless Management - Prior to 1.44.0.0, 10.96.0.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-29218 |...

HPESBGN04232 rev.1 - HPE Network Functions, Apache Log4j 2 Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified Data Management UDM 1.2009.0, 1.2101.0, 1.2103.0, 1.2105.0, 1.2107.0, 1.2109.0, 1.2109.1 HPE Authentication Server Function AUSF 1.2009.0, 1.2101.0, 1.2103.0,...

HPESBEZ04196 rev.2 - HPE Ezmeral Data Fabric, Remote Access Restriction Bypass

Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ezmeral Data Fabric - Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch Tez-0.9: mapr-tez-0.9.201907090334-1.noarch Tez-0.9.2: mapr-tez-0.9.2.0.201907081043-1.noarch...

HPESBGN04214 rev.1 - HPE Edgeline Integrated System Manager (iSM) for Edgeline EL300 Using DNSmasq and Nginx, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Unauthorized Data Access, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline EL300 Converged Edge System - Prior to v1.50 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBGN04223 rev.1 - HPE Remote SIM Provisioning Manager (RSPM), Apache Log4j 2 Remote Arbitrary Code Execution and Remote Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Remote SIM Provisioning Manager RSPM - RSPM1.3.2, RSPM1.4.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-44228 |...

HPESBGN04219 rev.2 - HPE 3PAR Service Processors, Apache Log4j 2 Remote Arbitrary Code Execution and Remote Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors - SP 5.x version Prior to 5.0.9.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-44228 |...

HPESBST04207 rev.1 - HPE StoreServ Management Console (SSMC), Authenticated Code Injection Leading to Privilege Elevation

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreServ Management Console SSMC 3.4 GA to 3.8.1 HPE 3PAR StoreServ Management and Core Software Media 3.4 GA to 3.8.1 CVSS Scores: | CVE | CVSS Vector | Base Score | |...

HPESBST04210 rev.1 - HPE Fibre Channel Host Bus Adapters Emulex HBA Manager, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Arbitrary File Download, Arbitrary File Modification, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 8Gb PCIe Host Bus Adapters - Prior to Emulex HBA Manager 12.8.542.26 - Please see VULNERABILTY SUMMARY section for model...

HPESBNW04201 rev.2 - HPE Aruba Instant (IAP), Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Command Execution, Denial of Service DoS, Disclosure of Sensitive Information, Unauthorized Read Access to Files, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 100 Series Access Points - See Details section for...

HPESBNW04161 rev.1 - HPE FlexNetwork, FlexFabric, and MSR Switches and Routers, Multiple Local and Remote Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Buffer Overflow; Remote: Cross-Site Scripting XSS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE FlexFabric 12900E Switch Series - see table in RESOLUTION for the minimum Comware...

HPESBGN04180 rev.2 - HPE Edgeline Infrastructure Manager, Remote Disclosure of Sensitive Information

Potential Security Impact: Remote: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline Infrastructure Management Software - Prior to 1.24 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26586 |...

HPESBNW04185 rev.2 - HPE Aruba AOS-CX Switch Series, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Bypass Security Restrictions, Cross-Site Scripting XSS; Remote: Disclosure of Information, Execution of Arbitrary Commands SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 8400 Switch Series 10.04.xxxx - versions prior to 10.04.3070, 10.05.xx...

HPESBST04170 rev.1 - HPE Simplivity 380 Gen9 Systems Using Certain Intel Processors, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen9 - Prior to version 2.90 HPE ProLiant XL170r Gen10 Server - Prior to version 2.90 HPE ProLiant XL190r Gen10 Server - Prior to version 2.90 CVSS Scores: ...

HPESBST04178 rev.1 - HPE SimpliVity Systems using VMware, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 2600 Gen10 - All active versions HPE SimpliVity 2600 - All active versions HPE SimpliVity 325 - All active versions HPE SimpliVity 380 Gen10 - All active versions HPE...

HPESBHF04182 rev.1 - HPE Superdome X Servers, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Superdome X Base Enclosure - Prior to Bundle 8.8.50 HPE Integrity Superdome X Server - Prior to Bundle 8.8.50 HPE Integrity Superdome X with BL920s Blades - Prior to Bundle...

HPESBST04167 rev.1 - HPE StoreEasy Gen10 Systems Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Storage File Controller Prior to version 2.50 HPE StoreEasy 1X60 Storage Prior to version 2.50 HPE StoreEasy 1450 Storage...

HPESBHF04158 rev.1 - HPE Synergy Gen10 Servers Using Certain Intel Processor, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Compute Module - Prior to version 2.50 HPE Synergy 660 Gen10 Compute Module - Prior to version 2.50 CVS...

HPESBHF04150 rev.1 - HPE Gen10 Servers with Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Server - Prior to version 2.50 HPE ProLiant DL380 Gen10 Server - Prior to version 2.50 HPE ProLiant...

HPESBHF04143 rev.2 - HPE Integrated Lights-Out 4 (iLO 4) for Moonshot, Edgeline Cartridges and Blades, HPE Moonshot Chassis Management firmware, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m510 Server Cartridge - Prior to version 2.64 for Moonshot/Edgeline HPE ProLiant m710x Server...

HPESBHF04149 rev.1 - HPE StoreOnce Systems using HPE Integrated Lights-Out 5 (iLO 5), Multiple Remote and Local vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreOnce 5650 - Prior to 4.3.0 HPE StoreOnce 5200 - Prior to 4.3.0 HPE StoreOnce 3640 - Prior to 4.3.0...

HPESBNW04126 rev.2 - Aruba AirWave Management Platform, Multiple Vulnerabilities

Potential Security Impact: Remote: Escalation of Privilege, SQL Injection, URL Redirection, Unauthorized Access, Authentication Restriction Bypass, XML External Entity XXE, Insecure Deserialization SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform -...

HPESBUX04114 rev.1 - HP-UX 11iv3 Tomcat-based Servlet Engine7.0.104.01. Multiple Remote Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Privileged Information; Remote: Code Execution, Denial of Service DoS, Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Tomcat-based Servlet v.7.x Engine D.7.0.104.01 a...

HPESBGN04107 rev.2 - HPE iLO Amplifier Pack, Remote Cross-Site Scripting (XSS) Vulnerability

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Prior to version 1.95 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26580 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:...

HPESBGN04109 rev.1 - HPE iLO Amplifier Pack, Multiple Remote Cross-Site Scripting (XSS) Vulnerabilities

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Prior to version 1.80 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-11022 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...

HPESBNS04081 rev.1 - HPE Web ViewPoint Suite, Remote Unauthorized Access

Potential Security Impact: Remote: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Web ViewPoint T0320 - L, J and H series Web ViewPoint Plus T0952 - L, J and H series Web ViewPoint Enterprise T0986 - L, J and H series CVSS Scores: | CVE | CVSS Vector | Base...

HPESBHF04084 rev.1 - HPE Moonshot Provisioning Manager, Remote Buffer Overflow in khuploadfile.cgi

Potential Security Impact: Remote: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Provisioning Manager v1.20 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-25139 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | 7.3 |...

HPESBHF04085 rev.1 - HPE Moonshot Provisioning Manager, Remote Directory Traversal in khuploadfile.cgi

Potential Security Impact: Remote: Directory Traversal SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Provisioning Manager Version: 1.20 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-25140 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

HPESBHF04079 rev.2 - HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) for Moonshot and Edgeline Cartridges and Blades, Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m750 Server Blade - Prior to iLO 5 v2.32 for Moonshot/Edgeline HPE ProLiant m710x Server Blade - Prior to iLO 4 v2.61 for Moonshot/Edgeline HPE ProLiant m710x-L Server...

HPESBHF04073 rev.1 - HPE Cloudline BMC firmware, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Directory Traversal, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloudline CL5800 Gen10 Server Version 1.08.0.0 HPE Cloudline CL3100 Gen10 Server Version 1.10.0.0 - Version 1.08.0.0 for Cascade Lake H...

HPESBHF04070 rev.4 - HPE ProLiant Servers, Apollo Products, Converged Systems, and Storage Products with Integrated Lights-Out 5, Integrated Lights-Out 4, or Integrated Lights-Out 3, Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v2.33 HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.77 HPE Integrated Lights-Out 3 iLO 3 - Prior to v1.94 HPE...

HPESBST04075 rev.1 - HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloader, Remote Cross-site Request Forgery (CSRF)

Potential Security Impact: Remote: Cross-Site Request Forgery CSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEver MSL Tape Libraries All versions prior to 7.30 HPE StoreEver 1/8 G2 Tape Autoloaders All versions prior to 5.40 CVSS Scores: | CVE | CVSS Vector | Base...