HPESBNW04990 rev.1 - HPE Telco IP, Remote Stack Overflow.

Potential Security Impact: Remote: Stack Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco IP Mediation 8.5.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-7254 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 7.5 | RESOLUTION HPE...

HPESBNW04972 Rev. 1 - HPE Telco Network Function Virtual Orchestrator, Multiple Vulnerabilities

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Network Function Virtualization Orchestrator HPE Telco Network Function Virtualization Orchestrator v7.4.0 or previous released versions CVSS Scores: | CVE | CVSS...

HPESBHF04852 rev.1 - HPE Online Double Conversion UPS Using Network Management Module (RegreSSHion), Remote Unauthenticated Code Execution

Potential Security Impact: Remote: Unauthorized Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE G2 R5000 3U L630/208V 4out NA/JP UPS - Prior to v3.1.21 - Firmware for Q1C17A module. HPE G2 R5000 3U L630/208V 5out NA/JP UPS - Prior to v3.1.21 - Firmware for Q1C17...

HPESBHF04785 rev.1 - Certain HPE SimpliVity AMD Servers Using Certain AMD EPYC Processors, AMD-SB-3019: AMD SEV Confidential Computing Vulnerability

Potential Security Impact: Local: Unauthorized Data Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 325 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20250630 HPE SimpliVity 325 Gen10 - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v202506...

HPESBNW04845 rev.1 - HPE Aruba Networking AOS-10 and AOS-8 Mobility Conductor, Controllers, and Gateways - Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Arbitrary Command Execution, Arbitrary File Download, Arbitrary File Modification, Cross-Site Scripting XSS, Unauthorized Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 7000 Series...

HPE Aruba Networking AOS-8 Instant AP and AOS-10 AP Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Command Execution, Unauthorized Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 100 Series Access Points See vulnerability summary for affected versions Aruba 103 Series Access Points See vulnerability...

HPESBST04822 rev.2 - HPE GreenLake for Block Storage OS, HPE Alletra 9000 OS, HPE 3PAR OS, and HPE Primera OS, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE GreenLake for Block Storage OS - Prior to 10.4.8 HPE Alletra 9000 - Prior to 9.6.3 - Operating System HPE 3PAR Operating System Software - Prior ...

HPESBCR04828 rev.2 - HPE Cray XD670 Server Using AMI BMC Redfish API, Authentication Bypass Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to BMC v1.19 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-54085 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | 10.0 |...

HPESBHF04794 rev.2 - Certain HPE ProLiant DL/ML, Alletra, Apollo, Edgeline, MicroServer and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01213, 2025.1 IPU - Intel SGX Advisory, Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to v2.4401-17-2025 HPE Alletra 4120 - Prior to v2.4401-17-2025 HPE Alletra 4140 - Prior to v2.4401-17-2025 HPE ProLiant DL110 Gen11 - Prior to...

HPESBHF04783 rev.2 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-3019: AMD SEV Confidential Computing Vulnerability

Potential Security Impact: Local: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen11 Server - Prior to v2.5005-16-2025 HPE ProLiant DL345 Gen11 Server - Prior to v2.5005-16-2025 HPE ProLiant DL365 Gen11 Server - Prior to...

HPESBST04766 rev.1 - HPE B-Series SANnav Management Portal, Remote Authentication Bypass Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav Management Software - Prior to v2.3.0a CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-52160 |...

HPESBNS04759 rev.1 - HPE NonStop DISK UTIL, Local Denial of Service vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. DISK UTIL T9208 -- L-series: T9208L01, T9208L01^ACE, T9208L01^ACG, T9208L01^ACH, T9208L01^ACJ -- J-series: All J-series product versions T9208H01 to T9208H01^ACI -- Affected RVU...

HPESBHF04703 rev.1 - HPE Superdome Flex and Superdome Flex 280 servers, Remote Code Execution (RCE) Vulnerability (RegreSSHion)

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex 280 Server - Prior to v1.90.12 HPE Superdome Flex Server - Prior to v4.0.10 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-6387 |...

HPESBHF04688 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01073, Intel Xeon Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP v20240830 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-22374 |...

HPESBHF04682 rev.1 - Certain HPE ProLiant DL/ML/XL, Alletra, Apollo, Synergy, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01100, 2024.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to v2.2008-07-2024 HPE ProLiant DL360 Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DL380 Gen10 Plus server -...

HPESBST04679 rev.2 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS), Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Sensitive Information, Unauthorized Data Modification, Unauthorized Read Access to Data, Buffer Overflow, Stack Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Brocade 32Gb Fibre Channel SAN Switch fo...

HPESBST04649 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS), Remote Code Execution and Elevated Privileges Vulnerability

Potential Security Impact: Remote: Arbitrary Code Execution, Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN2600B SAN Extension Switch - v9.x prior to v9.1.1d1 HPE B-series SN3600B Fibre Channel Switch - v9.x prior to v9.1.1d1 HPE B-series SN470...

HPESBHF04634 rev.1 - HPE Compute Scale-up Server 3200 Server, Disclosure of Sensitive Information

Potential Security Impact: Remote: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.10.342 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-22440 |...

HPESBHF04607 rev.1 - Certain HPE ProLiant DL/DX Servers Using Certain Intel Processors, INTEL-SA-00960, 2024.1 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to v2.0002-22-2024 HPE ProLiant DL360 Gen10 Plus server - Prior to v2.0003-06-2024 HPE ProLiant DL380 Gen10 Plus server -...

HPESBHF04616 rev.1 - HPE Synergy Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00923, 2024.1 IPU - Intel Chipset Software and SPS Advisory, Remote Denial of Service Vulnerability

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to v04.04.04.603.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-35191 |...

HPESBHF04609 rev.1 - Certain HPE ProLiant DL/ML and MicroServer Servers Using Certain Intel Processors, INTEL-SA-00982, 2024.1 IPU - Intel Processor Return Predictions Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant MicroServer Gen11 - Prior to v1.4401-18-2024 HPE ProLiant DL20 Gen11 - Prior to v1.4401-18-2024 HPE ProLiant ML30 Gen11 - Prior to v1.4401-18-2024 CVSS Scores: ...

HPESBNW04601 rev.2 - HPE Aruba Networking ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Cross-Site Scripting XSS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager Please see vulnerability summary for details. Affected Products...

HPESBHF04596 rev.2 - HPE SimpliVity Servers Using SSH, Remote Authentication Bypass (Terrapin Attack)

Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. SimpliVity Omnistack for HPE - Version 4.2.0 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-48795 |...

HPESBGN04569 rev.1 - HPE Unified Mediation Bus (UMB), Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Sensitive Information, URL Redirection, Unauthenticated Arbitrary Code Execution, Unauthorized Write Access to the File System, memory corruption, XML External Entity XXE, Host Header Injection; Remote: Bypass Security...

HPESBUX04589 rev.1 - HP-UX Apache Web Server, Multiple Vulnerabilities

Potential Security Impact: Local: Access Restriction Bypass, Bypass Security Restrictions, Disclosure of Information, Server-Side Request Forgery SSRF, memory corruption; Remote: Access Restriction Bypass, Bypass Security Restrictions, Disclosure of Information, Server-Side Request Forgery SSRF,...

HPESBGN04570 rev.1 - HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities

Potential Security Impact: Local: Insecure Deserialization; Remote: Bypass Security Restrictions, Denial of Service DoS, Insecure Deserialization, Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified OSS Console UOC - Prior to v3.1.0 CVSS Scores: | CVE | CV...

HPESBNS04567 rev.1 - HPE NonStop OSS Network Utilities, Multiple Vulnerabilities

Potential Security Impact: Remote: Bypass Security Restrictions, Indirect Vulnerabilities, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. OSS Network Utilities T1204 - Prior to T1204L01^AAI CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBUX04564 rev.1 - HP-UX OpenSSL, Local and Remote Denial of Service

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX OpenSSL Software - Prior to A.01.01.01w.001 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-0464 |...

HPESBHF04557 rev.1 - Certain HPE Apollo,XL Servers Using Certain Intel Processors, INTEL-SA-00950, 2023.4 IPU Out-of-Band (OOB) - Intel Processor Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to 1.9010-19-2023 HPE Apollo 4200 Gen10 Plus System - Prior to 1.9010-19-2023 HPE...

HPESBGN04548 rev.2 - HPE OneView, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView All versions prior to 6.60.06, 8.60.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-30912 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H ...

HPESBST04536 rev.1 - HPE MegaRAID Storage Administrator (HPE MRSA) Using Broadcom RAID Controller Web Based Console, Multiple Vulnerabilities.

Potential Security Impact: Local: Multiple Vulnerabilities; Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Smart Array P824i-p Controller - Prior to v8.2.19 HPE MR216i-a Gen10 Plus x16 Lanes without Cache NVMe/SAS 12G Controller - Prior to...

HPESBNS04339 rev.1 - Certain HPE NonStop Products Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity NonStop BladeSystem NB56000c - Please refer to the entries for HPE NonStop Network and Storage CLIMs HPE Integrity NonStop NS2400 - Please refer to the entries...

HPESBHF04541 rev.1 - Certain HPE ProLiant AMD XL Servers Using AMD EPYC Processors, AMD-SB-4007, DXE Driver Memory Leaks, Local Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL675d Gen10 Plus Server - Prior to v2.6411-30-2022 HPE ProLiant XL645d Gen10 Plus Server - Prior to v2.6411-30-2022 HPE ProLiant XL225n Gen10 Plus 1U...

HPESBGN04538 rev.4 - HPE OneView and HPE OneView Global Dashboard (OVGD), Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView All versions prior to 6.60.05, 7.00.00, 7.10.00, 7.20.00, 8.00.00, 8.10.00, 8.20.00, 8.30.00, 8.40.00 HPE OneView Global Dashboard All versions prior to 2.81 CVSS...

HPESBNW04527 rev.2 - Multiple Vulnerabilities in HPE Aruba Networking Virtual Intranet Access (VIA) Windows Client

Potential Security Impact: Local: Creation and Deletion of Arbitrary Files, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Virtual Intranet Access VIA Windows Client Only - All versions 4.5 and lower CVSS Scores: | CVE | CVSS Vector | Base Score | |...

HPESBHF04513 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00813, 2023.3 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4510 Gen10 System - Prior to 2.9007-20-2023 HPE ProLiant XL230k Gen10 Server - Prior to 2.9007-20-2023 HPE ProLian...

HPESBHF04516 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 Gen10 Plus System - Prior to 1.8007-05-2023 HPE ProLiant XL220n Gen10 Plus Server - Prior to 1.8007-05-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04526 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX380 Gen10 Plus server - Prior to 1.8007-05-2023 HPE ProLiant DX360 Gen10 Plus server - Prior to 1.8007-05-2023 HPE ProLiant DX220n Gen10 Plus server - Prior to...

HPESBHF04517 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00813, 2023.3 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 server - Prior to 2.9007-20-2023 HPE ProLiant DX380 Gen10 server - Prior to 2.9007-20-2023 HPE...

HPESBGN04524 rev.1 - HPE Intel E810 Series Ethernet Controllers, INTEL-SA-00835, Intel Ethernet Controllers and Adapters Advisory, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Intel E810-XXVDA4 Ethernet 10/25Gb 4-port SFP28 Adapter for HPE - Prior to v4.20 Intel E810-CQDA2 Ethernet 100Gb 2-port QSFP28 Adapter for HPE - Prior to v4.20 Intel E810-CQDA2...

HPESBHF04521 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Certain Intel Processors, INTEL-SA-00837, 2023.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920t Server Blade - Prior to 1.7407-24-2023 HPE Edgeline e920 Server Blade - Prior to 1.7407-24-2023 HPE Edgeline e920d Server Blade - Prior to 1.7407-24-2023 CV...

HPESBHF04501 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-00836, 2023.3 IPU - Intel Xeon Scalable Processors Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 1.8007-05-2023 U46 ROM Family HPE StoreEasy 1860 Storage - Prior to 1.8007-05-2023 U46 ROM Family CVSS Scores: | CVE | CVSS Vector | Ba...

HPESBST04494 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS), Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege; Remote: Disclosure of Information, Disclosure of Sensitive Information, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Brocade 16Gb Fibre Channel SAN Switch Module for HPE Synergy -...

HPESBNW04498 rev.2 - Authenticated Remote Code Execution in Aruba CX Switches

Potential Security Impact: Remote: Execution of Arbitrary Commands SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series See vulnerability summary for details Aruba CX 4100i Switch Series See vulnerability summary for details Aruba CX 6000 Switch Series See...

HPESBMU04496 rev.1 - HPE IceWall Identity Manager, Denial Of Service (DOS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall Identity Manager 5.0 RHEL and HP-UX and 6.0 RHEL and Windows - using Apache Commons FileUpload CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBHF04486 rev.1 - HPE Intelligent Provisioning (IP) for Gen9, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Intelligent Provisioning - Prior to 2.87 for Gen9 platforms CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-30906 |...

HPESBUX04483 rev.1 - HP-UX BIND, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Multiple Vulnerabilities, Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX BIND 9.11.1 prior to C.9.11.1.6.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-25215 |...

HPESBHF04464 rev.1 - Certain HPE Edgeline Servers Using Certain Intel Processors, INTEL-SA-00807, 2023.2 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant e910 Server Blade - prior to v2.0604-20-2023 HPE ProLiant m750 Server Blade - prior to v1.5804-20-2023 HPE ProLiant e910t Server Blade ...

HPESBHF04461 rev.1 - Certain HPE ProLiant DL/ML Servers Using Certain Intel Processors, INTEL-SA-00807, 2023.2 IPU - BIOS Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen9 Server - Prior to 3.1403-09-2023 HPE ProLiant ML30 Gen9 Server - Prior to 3.1403-09-2023 HPE ProLiant DL360 Gen10 Server -...

HPESBHF04472 rev.1 - HPE ProLiant RL300 Gen11 Server Using iLO 6, Local Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant RL300 Gen11 - System ROM v1.12, and HPE Integrated Lights-Out 6 iLO 6 v1.05 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-28092 ...