HPESBHF03874 rev.1 - Certain HPE Products using Intel-based Processors, L1 Terminal Fault (L1TF) Speculative Side-channel Vulnerabilities, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL580 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL560 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL380 Gen10 Server - Pri...

HPESBGN03900 rev.1 - HPE enhanced Internet Usage Manager (eIUM) Remote Unauthorized Disclosure of Information vulnerability and Remote Bypass Security Restrictions

Potential Security Impact: Remote: Bypass Security Restrictions, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE enhanced Internet Usage Manager eIUM 9.0 FP01 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBHF03890 rev.1 - HPE Service Governance Framework (SGF) - Remote Unauthorized Disclosure of Information

Potential Security Impact: Remote: Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SGF 4.2 for RHEL 6 E-Media SGF 4.2 HPE SGF 4.2 for RHEL 6 Media SGF 4.2 HPE SGF 4.2 for RHEL 7 E-Media SGF 4.2 HPE SGF 4.2 for RHEL 7 Media SGF 4.2 HPE SGF...

HPESBHF03902 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC - Prior to PLAT 7.3 E0605P04 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-17485 |...

HPESBST03880 rev.1 - HPE XP P9000 Command View Advanced Edition (CVAE), Local and Remote Unauthorized Access to Sensitive Information

Potential Security Impact: Local: Unauthorized Access to Sensitive Information; Remote: Unauthorized Access to Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE XP P9000 Command View Advanced Edition Software Licenses All CVSS Scores: | CVE | CVSS Vector |...

HPESBHF03866 rev.3 - HPE Integrated Lights-Out 3,4,5 iLO Moonshot and Moonshot iLO Chassis Manager, using SSH, Remote Execution of Arbitrary Code, Local Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information; Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v1.35 HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.61 HPE...

HPESBHF03873 rev.1 - Certain HPE Gen10 Servers with Intel-based Processors using Converged Security and Management Engine (CSME), and Power Management Controller (PMC) Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL380 Gen10 Server - Prior to 04.00.04.39312 Sep 2018 HPE Cloudline CL2100 Gen10 Server - Prior to 04.00.04.39312...

HPESBST03884 rev.2 - HPE ConvergedSystem 700 Solutions Using HPE 3PAR Service Processor, Multiple Vulnerabilities

Potential Security Impact: Local: Directory Traversal, Disclosure of Privileged Information; Remote: Access Restriction Bypass, Code Execution, Cross-Site Request Forgery CSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors - Prior to SP-4.4.0.GA-110MU7...

HPESBHF03883 rev.1 - HPE Comware 5 and Comware 7 Products using NTP, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 12500 Main Processing Unit with Comware v7 Operating System All versions Comware v5 CW5 Products All versions CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...

HPESBHF03887 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Arbitrary File Modification

Potential Security Impact: Remote: Arbitrary File Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC Plat 7.3 E0506P09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7102 |...

HPESBNW03878 rev.1 - HPE Comware 5 and Comware 7 Switches and Routers using NTP, Remote Denial of Service

Potential Security Impact: Local: Unauthorized Modification; Remote: Denial of Service DoS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Switch Fabric Modules Comware 5, Comware 7 HPE 9500 Switch Series Comware 5 HPE FlexFabric 5830...

HPESBST03870 rev.2 - HPE 3PAR Service Processor (SP), Local Disclosure of Privileged Information

Potential Security Impact: Local: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors - Prior to SP-5.0.0.0-22913GA - All SP 4.x versions CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-709...

HPESBST03857 rev.1 - HPE XP7 Command View Advanced Edition Products using JDK, Local and Remote Authentication Bypass

Potential Security Impact: Local: Authentication Bypass; Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE XP7 Command View Advanced Edition Suite all CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-2783 |...

HPESBST03859 rev.1 - HPE XP P9000 Command View Advanced Edition Software (CVAE) - Multiple Vulnerabilities

Potential Security Impact: Local: Cross-Site Scripting XSS, URL Redirection; Remote: Cross-Site Scripting XSS, URL Redirection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP P9000 Command View Advanced Edition Software 7.0.0-00 to earlier than 8.60-00 CVSS Scores: | CVE |...

HPESBHF03867 rev.1 - HPE Systems with Intel-based processors with SPI Flash Engine, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen9 Server Blade Prior to 2.52 HPE ProLiant BL660c Gen9 Server Prior to 2.52 HPE ProLiant DL180 Gen9 Server Prior to 2.52 HPE ProLiant DL60 Gen9 Server Prio...

HPESBHF03856 rev.1 - Comware v7 and Intelligent Management Center Products, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC 7.3 - IMC PLAT HPE FlexFabric 12500 Switch Series Comware 7 - Detailed list of switches provided below HPE FlexNetwork 10500 Switch...

HPESBMU03837 rev.1 - HPE CentralView Fraud Risk Management - Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Disclosure of Sensitive Information, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE CentralView CV ERM 6.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8991 |...

HPESBHF03841 rev.2 - Certain HPE Servers with AMD-based Processors, Multiple Vulnerabilities (Fallout/Masterkey)

Potential Security Impact: Local: Denial of Service DoS, Unauthorized Disclosure of Information, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL385 Gen10 Server - Prior to 1.2204-16-201823 Apr 2018 - AMD Processor, Fallout HPE Cloudline...

HPESBHF03831 rev.1 - HPE Integrated Lights-Out 2 (iLO 2), Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 2 iLO 2 prior to 2.33 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2015-4000 |...

HPESBHF03823 rev.1 - HPE XP Command View Advanced Edition Software (CVAE), Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP Command View Advanced Edition Software earlier than 8.5.3-00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5641 |...

HPESBHF03822 rev.1 - HPE XP Command View AE Suite (XPCVAE), Remote Bypass of Security Restrictions

Potential Security Impact: Remote: Bypass Security Restrictions SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP Command View Advanced Edition Software Earlier than 8.5.3-00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8988 |...

HPESBHF03813 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC 7.3 E0506 - Reported on Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8981 |...

HPESBHF03814 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Unauthorized Modification

Potential Security Impact: Remote: Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC PLAT 7.3 E0506 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2004-2761 |...

HPESBHF03811 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Multiple Vulnerabilities

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC version 7.3 E0506P03 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8984 |...

HPESBHF03808 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC Plat 7.3 E0504P4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8983 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A...

HPESBHF03810 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8980 |...

HPESBMU03806 rev.2 - HPE IceWall Products, Multiple Remote Unauthorized Disclosure of Information, Unauthorized Modificiation

Potential Security Impact: Remote: Unauthorized Disclosure of Information, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dfw 10.0 Patch 8 HP-UX and RHEL, 10.0 Patch 10 HP-UX and RHEL and 11.0 RHEL IceWall MCRP 4.0 RHEL 7 IceWall MFA 4.0...

HPESBHF03805 rev.24 - Certain HPE products using Microprocessors from Intel, AMD, and ARM, with Speculative Execution, Elevation of Privilege and Information Disclosure (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754)

Potential Security Impact: Local: Disclosure of Information, Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL120 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLiant DL160 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLian...

HPESBNS03804 rev.1 - HPE NonStop Server, Local Authentication Restriction Bypass

Potential Security Impact: Local: Authentication Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop Servers L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL CVSS Scores: | CVE |...

HPESBST03780 rev.1 - HPE MSA 1040 and 2040 SAN Storage. Remote Escalation of Privilege, Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass, Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP MSA 2040 SAN Storage GL220P008 and earlier HP MSA 1040 SAN Storage GL220P008 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | -...

HPESBMU03753 rev.4 - HPE System Management Homepage for Windows and Linux, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Elevation of Privilege, Execution of Arbitrary Code; Remote: Authentication Bypass, Cross-Site Scripting XSS, Denial of Service DoS, Disclosure of Sensitive Information, Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted...

HPESBNS03775 rev.1 - HPE NonStop Samba, Remote Disclosure of Information, Authentication Bypass, Unauthorized Elevation of Privilege

Potential Security Impact: Remote: Authentication Bypass, Disclosure of Information, Unauthorized Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop L-Series: T1201L01 through T1201L01^AAO; H and J-Series: T1201H01 through T1201H01^AAN CVSS...

HPESBGN03767 rev.1 - HPE Operations Orchestration, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Orchestration - All versions prior to 10.80 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8994 |...

HPESBGN03765 rev.2 - HPE LoadRunner and HPE Performance Center, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Performance Center - All versions HP LoadRunner - All versions CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-2183 |...

HPESBGN03762 rev.1 - HPE Network Node Manager i (NNMi) Software, Remote Bypass Security Restrictions, Cross-Site Scripting (XSS), URL Redirection

Potential Security Impact: Remote: Bypass Security Restrictions, Cross-Site Scripting XSS, URL Redirection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Network Node Manager I NNMi Software - v10.0x, v10.1x, v10.2x CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- ...

HPESBUX03747 rev.1 - HP-UX running BIND, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX DNS and BIND Software B.11.31 - BIND 9.9.4 prior to C.9.9.4.10.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-3135 |...

HPESBGN03758 rev.2 - HPE UCMDB, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP UCMDB Configuration Manager Software - v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8947 |...

HPESBGN03737 rev.1 - HPE IceWall Federation Agent, Remote Unauthorized Disclosure of Information, Unauthorized Modification

Potential Security Impact: Remote: Unauthorized Disclosure of Information, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall Federation Agent Version 3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8945 |...

HPESBHF03750 rev.1 - HPE Network Products including Comware 5, Comware 7 and VCX running NTP, Remote Denial of Service (DoS), Unauthorized Modification, Local Denial of Service (DoS)

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v5 CW5 Products All versions - Please refer to the RESOLUTION below for a list of updated products. Comware v7...

HPESBGN03742 rev.1 - HP Operations Analytics using Linux, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Operations Analytics Software - v2.2, v2.3, v2.31, v2.31 IP1, v2.31 IP2, v2.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...

HPESBST03739 rev.1 - HPE StoreFabric B-series Switches, Remote Elevation of Privilege

Potential Security Impact: Remote: Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. StoreFabric B-series Switches - All versions prior to FOS v7.4.1d and v8.0.1b CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-8202 |...

HPESBNW05126 rev.1 - HPE Networking Advance Notification of Security Advisories for September 15, 2026.

Potential Security Impact: Remote: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba EdgeConnect Enterprise Orchestration Software N/A. This is an announcement letter. Aruba EdgeConnect Enterprise Software N/A. This is an announcement letter. HPE Aruba...

HPESBNW05145 rev.1 - HPE Telco Intelligent Assurance, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Denial of Service DoS, Unauthorized Data Injection, XML External Entity XXE SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Intelligent Assurance 4.2.16 and below CVSS Scores: | CVE | CVSS Vector | Base Score | |...

HPESBNW04994 rev.2 - Local Privilege Escalation Vulnerability in HPE Aruba Networking Virtual Intranet Access (VIA) Client for Linux

Potential Security Impact: Remote: Arbitrary Command Execution, Execution of Arbitrary Commands, Unauthorized Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Virtual Intranet Access VIA 4.7.5 and below - Please refer to the "Vulnerability Summary"...

HPESBGN04985 rev.4 - Hewlett Packard Enterprise OneView Software, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - All versions through v10.20 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-37164 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | 10.0 |...

HPESBNW04976 rev.1 - HPE Virtualized Telecommunication Management Information Platform (vTeMIP), Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, memory corruption, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE TeMIP 8.5.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-21227 |...

HPESBNS04778 rev.1 - HPE NonStop CLIM, Multiple OpenSSH Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. CONSOLE CLIM UTILITIES T0697 T0697H01^AAA,T0697H01^AAQ - T0697CONSOLE CLIM UTILITIES is impacted with only CVE-2023-48795 CLIM DVD Installation...

HPESBNW04777 rev.1 - HPE Telco Service Orchestrator, Multiple Vulnerabilities

Potential Security Impact: Remote: Unauthorized Remote Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - Prior to v5.2.1 Original Product name HPE Service Director CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBHF04788 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01139, 2025.1 IPU - UEFI Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 2.3001-16-2025 U46 ROM Family or prior to 3.4001-16-2025 U30 ROM Family HPE StoreEasy 1860 Storage - Prior to...

HPESBHF04718 rev.1 - HPE Superdome Flex 280 Servers Using Intel Processors, INTEL-SA-01118, 2024.3 IPU - 3rd Generation Intel Xeon Scalable Processor Advisory

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex 280 Server - Prior to v1.90.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-25939 |...