HPESBST03953 rev.1 - HPE Command View Advanced Edition (CVAE), Multiple Vulnerabilities

Potential Security Impact: Local: Multiple Vulnerabilities; Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP P9000 Command View Advanced Edition Software 8.4.0-00 to earlier than 8.6.2-00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...

HPESBST03918 rev.1 - HPE 3PAR Service Processor (SP), remote Disclosure of Privileged Information

Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors version 4.1 through 4.4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-11991 |...

HPESBST03928 rev.1 - Command View Advanced Edition (CVAE) Products using JDK, Multiple Vulnerabilities

Potential Security Impact: Local: Authentication Bypass; Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE XP7 Command View Advanced Edition Suite all - vulnerability eliminated after applying updated Oracle JDK 8u181 or later CVSS Scores: | CVE |...

HPESBHF03932 rev.2 - HPE Products using certain Intel UEFI Reference Code, Local Escalation of Privilege, Denial of Service Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Server Firmware prior to 2.04 04/18/2019 HPE ProLiant DL160 Gen10 Server Firmware prior to 2.04 04/18/2019 HPE ProLiant DL180...

HPESBHF03929 rev.1 - HPE Superdome Flex Server, Local Denial of Service, Disclosure of Information, and Escalation of Privilege

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server Prior to v2.5.314 25 Mar 2019 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBHF03914 rev.1 - Certain HPE Servers with Intel Server Platform Services (SPS) Firmware, Multiple Local Vulnerabilities

Potential Security Impact: Local: Authentication Bypass, Denial of Service DoS, Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL380 Gen10 Server Prior to Server Platform Services SPS 04.01.04.2512 Apr 2019 HPE ProLiant DL360 Gen10 Server...

HPESBHF03904 rev.1 - HPE Service Pack for ProLiant (SPP) Bundled Software, Local Access Restriction Bypass

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Service Pack for ProLiant Prior to version 2018.09.027 Sep 2018 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7118 |...

HPESBHF03907 rev.1 - HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers, Remote Cross-Site Scripting in HPE iLO 5 Web User Interface

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers Prior to v1.40 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7117 |...

HPESBHF03906 rev.1 - HPE Intelligent Management Center (IMC), Remote Buffer Overflow, Code Execution, Denial of Service

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Remote Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC prior to IMC PLAT 7.3 E0605P06 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- |...

HPESBHF03899 rev.1 - HPE Converged System 700 Virtual Services Router (VSR) using NTP

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 Virtualization 2.0 VMware Kit - Nov 2017 Recipe or Aug 2018 Recipe HP ConvergedSystem 700x for VMware Solution Kit - Nov 2017 Recipe or Aug 2018 Recipe H...

HPESBHF03897 rev.1 - HPE Switches and Routers using OpenSSL, and Intelligent Management Center (iMC) PLAT, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC IMC PLAT 7.3 E0504P04 HPE FlexFabric 12500 Switch Series Comware 5 HPE 9500 Switch Series Comware 5 HPE FlexNetwork 6600 Router Series...

HPESBHF03890 rev.1 - HPE Service Governance Framework (SGF) - Remote Unauthorized Disclosure of Information

Potential Security Impact: Remote: Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SGF 4.2 for RHEL 6 E-Media SGF 4.2 HPE SGF 4.2 for RHEL 6 Media SGF 4.2 HPE SGF 4.2 for RHEL 7 E-Media SGF 4.2 HPE SGF 4.2 for RHEL 7 Media SGF 4.2 HPE SGF...

HPESBGN03889 rev.1 - HPE Device Entitlement Gateway (DEG), Remote SQL Injection and Elevation of Privileges

Potential Security Impact: Remote: SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Device Entitlement Gateway DEG Prior to DEG v3.2.4, DEG v3.3, DEG v3.3.1 with DEG NRBGUI PC1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7107 |...

HPESBST03884 rev.2 - HPE ConvergedSystem 700 Solutions Using HPE 3PAR Service Processor, Multiple Vulnerabilities

Potential Security Impact: Local: Directory Traversal, Disclosure of Privileged Information; Remote: Access Restriction Bypass, Code Execution, Cross-Site Request Forgery CSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors - Prior to SP-4.4.0.GA-110MU7...

HPESBHF03886 rev.1 - HPE Comware 5 and Comware 7 Switches and Routers using NTP, Remote Denial of Service

Potential Security Impact: Local: Unauthorized Modification; Remote: Denial of Service DoS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Switch Fabric Modules Comware 5, Comware 7 HPE 9500 Switch Series Comware 5 HPE FlexFabric 5830...

HPESBHF03871 rev.1 - Certain HPE Altoline Switches using Microprocessors with Speculative Execution, Local Unauthenticated Information Disclosure (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754)

Potential Security Impact: Local: Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Altoline 6920 48XG 6QSFP+ x86 ONIE AC Back-to-Front Switch BIOS versions prior to Build 20180212, e.g. A02 - Refer to the BIOS version and Build Date in...

HPESBNW03878 rev.1 - HPE Comware 5 and Comware 7 Switches and Routers using NTP, Remote Denial of Service

Potential Security Impact: Local: Unauthorized Modification; Remote: Denial of Service DoS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Switch Fabric Modules Comware 5, Comware 7 HPE 9500 Switch Series Comware 5 HPE FlexFabric 5830...

HPESBHF03875 rev.1 - HPE Integrated Lights Out 4 and 5, (iLO 4, 5), Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 4 iLO 4 - Prior to 2.60 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to 1.30 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- ...

HPESBST03870 rev.2 - HPE 3PAR Service Processor (SP), Local Disclosure of Privileged Information

Potential Security Impact: Local: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors - Prior to SP-5.0.0.0-22913GA - All SP 4.x versions CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-709...

HPESBHF03858 rev.1 - HPE OfficeConnect 1810 Switch Series Local Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP 1810-24G Switch P.2.22 and previous versions HP 1810-48G Switch PK.1.34 and previous versions HP 1810-8 v2 Switch P.2.22 and previous versions CVSS Scores: | CV...

HPESBHF03864 rev.1 - HPE Intelligent Management Center (iMC PLAT), Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC PLAT 7.3 E0506P07 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7074 |...

HPESBHF03838 rev.1 - HPE iMC and Comware 7-based Switches and Routers using OpenSSL, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC All versions - IMC PLAT and IMC UAMTAM HPE FlexNetwork VSR1000 Virtual Services Router Series...

HPESBHF03843 rev.1 - HPE Moonshot Provisioning Manager, Remote Bypass of Security Restrictions, Local Arbitrary File Modification

Potential Security Impact: Local: Arbitrary File Modification; Remote: Bypass Security Restrictions SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Provisioning Manager Prior to v1.24 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7072 ...

HPESBGN03853 rev.1 - HPE Network Function Virtuallization Director (NFVD), Remote Unauthorized Access to Sensitive Information

Potential Security Impact: Remote: Unauthorized Access to Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Network Function Virtualization Director NFV Director 4.2.1 prior to gui patch 3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | ...

HPESBMU03837 rev.1 - HPE CentralView Fraud Risk Management - Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Disclosure of Sensitive Information, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE CentralView CV ERM 6.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8991 |...

HPESBUX03818 rev.2 - HP-UX Secure Shell, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Arbitrary Command Execution, Authentication Bypass, Authorized User SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX 11i Secure Shell Software A.07.30.003 and earlier are impacted CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...

HPESBHF03831 rev.1 - HPE Integrated Lights-Out 2 (iLO 2), Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 2 iLO 2 prior to 2.33 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2015-4000 |...

HPESBMU03833 rev.5 - HPE IceWall SSO dfw, IceWal MCRP, IceWall MFA Proxy, Remote URL Redirection

Potential Security Impact: Remote: URL Redirection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dfw 10.0 RHEL5, RHEL6, RHEL7, HP-UX, Windows and 11.0 RHEL 7 IceWall MCRP 3.0 RHEL 5, RHEL 6, RHEL 7, HP-UX and 4.0 RHEL 7, RHEL 8 IceWall MFA 4.0 Enterprise Edition MFA...

HPESBHF03821 rev.1 - HPE XP Command View AE Suite (XPCVAE), Remote Denial of Service

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP Command View Advanced Edition Software earlier than 8.5.3-00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBHF03823 rev.1 - HPE XP Command View Advanced Edition Software (CVAE), Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP Command View Advanced Edition Software earlier than 8.5.3-00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5641 |...

HPESBHF03826 rev.1 - HPE Integrated Lights-Out 3 (iLO 3) Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 3 iLO 3 1.88 - Unauthenticated Remote Denial of Service CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8987 |...

HPESBHF03808 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC Plat 7.3 E0504P4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8983 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A...

HPESBHF03810 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8980 |...

HPESBHF03799 rev.1 - HPE VCX Products using NTP, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. VCX Products All versions prior to v9.8.19 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-9310 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L |...

HPESBHF03782 rev.1 - HPE intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12554 |...

HPESBHF03781 rev.1 - HPE intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P4 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12561 |...

HPESBMU03753 rev.4 - HPE System Management Homepage for Windows and Linux, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Elevation of Privilege, Execution of Arbitrary Code; Remote: Authentication Bypass, Cross-Site Scripting XSS, Denial of Service DoS, Disclosure of Sensitive Information, Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted...

HPESBUX03772 rev.1 - HP-UX BIND Service Running Named, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Read Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX DNS and BIND Software B.11.31 - BIND 9.9.4 prior to C.9.9.4.11.0 and BIND 9.11.1 prior to C.9.11.1.2.0 CVSS Scores: | CVE | CVSS Vector ...

HPESBHF03705 rev.4 - HPE Integrated Lights-Out 4, 3, 2 and Moonshot Remote Console Administrator (iLO 4 and MRCA) Remote Disclosure of Information

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Remote Console Administrator Prior to 2.50 HP Integrated Lights-Out 4 iLO 4, Prior to 2.53 HP Integrated Lights-Out 3 iLO 3, Firmware for ProLiant G7 Servers Prior...

HPESBHF03769 rev.4 - HPE Integrated Lights-out 4 (iLO 4), Moonshot, and NonStop Systems, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 4 iLO 4 Prior to 2.53 HPE ProLiant m510 Server Cartridge Prior to 2.56 HPE ProLiant m710x Server Blade Prior to 2.56 CLIM BIOS and iLO...

HPESB3P03762 rev.1 - HPE C Switch Software using Cisco Prime Data Center Network Manager (DCNM), Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP C-series Switch Software Data Center Network Manager Version 10.11, 10.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-6639 |...

HPESBHF03766 rev.1 - HPE ConvergedSystem 700 Solution with Comware v5 Switches using NTP, Remote Denial of Service (DoS), Unauthorized Modification and Local Denial of Service (DoS)

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 1.0 HP ConvergedSystem 700 for Virtualization 1.0 HP ConvergedSystem 700x 1.0 HP ConvergedSystem...

HPESBGN03763 rev.1 - HPE SiteScope, Disclosure of Sensitive Information, Bypass Security Restriction, Remote Arbitrary Code Execution

Potential Security Impact: Local: Bypass Security Restrictions, Disclosure of Sensitive Information; Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP SiteScope Monitors Software Series - v11.2x, v11.3x CVSS Scores: | CVE | CVSS Vector | Base Scor...

HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege

Potential Security Impact: Remote: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloud Optimizer - v1.10, v1.20, v2.0, v2.01, v2.10, v2.20/ CO – v3.0, v3.01 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...

HPESBUX03759 rev.2 - HP-UX CIFS Sever using Samba, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Code Execution, Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Common Internet File System CIFS, Client/Server Software For HPE CIFS SERVER B.04.05.x release up-to version B.04.05.03.00 and all...

HPESBUX03747 rev.1 - HP-UX running BIND, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX DNS and BIND Software B.11.31 - BIND 9.9.4 prior to C.9.9.4.10.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-3135 |...

HPESBGN03758 rev.2 - HPE UCMDB, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP UCMDB Configuration Manager Software - v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8947 |...

HPESBNS03755 rev.2 - HPE NonStop Server using Samba, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop L Series: T1201L01 through T1201L01^AAL, H and J Series: T1201H01 through T1201H01^AAM CVSS Scores: | CVE ...

HPESBGN03737 rev.1 - HPE IceWall Federation Agent, Remote Unauthorized Disclosure of Information, Unauthorized Modification

Potential Security Impact: Remote: Unauthorized Disclosure of Information, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall Federation Agent Version 3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8945 |...

HPESBHF03754 rev.1 - HPE ML10 Gen 9 Server using Intel Xeon E3-1200 v5 Processor, Remote Access Restriction Bypass

Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant ML10 Gen9 E3-1225 v5 3.3GHz 4-core 8GB-R 1TB Non-hot Plug 4LFF SATA 300W AP Svr/Promo Gen9 HPE ProLiant ML10 Gen9 E3-1225 v5 4GB-R 1TB Non-hot Plug 4LFF SATA...