HPESBHF03803 rev.2 - Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance, Remote Denial of Service and Execution of Code

Potential Security Impact: Remote: Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Provisioning Manager prior to and including v1.20 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8975 |...

HPESBNS03804 rev.1 - HPE NonStop Server, Local Authentication Restriction Bypass

Potential Security Impact: Local: Authentication Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop Servers L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL CVSS Scores: | CVE |...

HPESBHF03799 rev.1 - HPE VCX Products using NTP, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. VCX Products All versions prior to v9.8.19 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-9310 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L |...

HPESBHF03801 rev.1 - HPE ProLiant m510 or m710x server cartridges with HP Trusted Platform Module, Local and Remote Unauthorized Access to Data

Potential Security Impact: Local: Unauthorized Access to Data; Remote: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Cartridge 5.51 HPE ProLiant m510 Server Cartridge 5.51 CVSS Scores: | CVE | CVSS Vector | Base Score | | ---...

HPESBHF03800 rev.1 - HPE Comware 7 MSR Routers, Remote Denial of Service and Local Elevation or Privilege

Potential Security Impact: Local: Elevation of Privilege; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products Earlier than R0605P20 release - MSR Routers Only CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBMU03794 rev.1 - HPE Insight Control, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Indirect Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Insight Control 7.6 LR1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8969 | CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N | 2.6 |...

HPESBMU03795 rev.1 - HPE Matrix Operating Environment, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Indirect Vulnerabilities, Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Matrix Operating Environment Software 7.6 LR1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-89...

HPESBHF03796 rev.1 - HPE RESTful Interface Tool (iLOREST), Local Execution of Arbitrary Code

Potential Security Impact: Local: Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP RESTful Interface Tool 1.5, 2.0 - hprest-1.5-79.x8664.rpm, ilorest-2.0-403.x8664.rpm CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8968...

HPESBHF03787 rev.1 - Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, Deserialization of Untrusted Data, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8962 |...

HPESBHF03788 rev.1 - Hewlett Packard Enterprise Intelligent Management Center flexFileUpload Directory Traversal Remote Code Execution Vulnerability

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC PLAT 7.3 E0504P02 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8961 |...

HPESBHF03785 rev.1 - HPE B-Series SAN Network Advisor Software, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP B-series SAN Network Advisor Software 14.0.2 and prior CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-8204 |...

HPESBHF03784 rev.1 - HPE B-Series SAN Network Advisor Software Running WildFly (formerly JBoss Application Server), Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP B-series SAN Network Advisor Software 14.0.2 and prior running on a Windows OS CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-0793 |...

HPESBHF03779 rev.1 - HPE Fabric OS using OpenSSH, Denial of Service

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. StoreFabric B-series Switches FOS prior to 7.4.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-6515 |...

HPESBHF03789 rev.2 - Certain HPE Gen9 Systems with HP Trusted Platform Module v2.0 Option, Unauthorized Access to Data

Potential Security Impact: Local: Unauthorized Access to Data; Remote: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Trusted Platform Module 2.0 Kit FW 5.51 - TPM 2.0 FW 5.62 is not affected. This is the Gen9 TPM 2.0 option only Gen9 servers could...

HPESBHF03792 rev.1 - HPE 501 Client Bridge, Aruba 501 Client Bridge, and HPE M111 Client Bridge - WPA2 Key Re-installation Vulnerabilities, Disclosure of information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP M111 Client Bridge v5.3.8 and earlier HP 501 Client Bridge v1.0.2 and earlier, v2.0.0 and earlier Aruba 501 Client Bridge v1.0.2 and earlier, v2.0.0 and earlier CVSS...

HPESBST03780 rev.1 - HPE MSA 1040 and 2040 SAN Storage. Remote Escalation of Privilege, Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass, Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP MSA 2040 SAN Storage GL220P008 and earlier HP MSA 1040 SAN Storage GL220P008 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | -...

HPESBHF03778 rev.1 - HPE intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12556 |...

HPESBHF03776 rev.1 - HPE Intelligent Management Center (iMC) Service Operation Management (SOM), Remote Arbitrary File Download

Potential Security Impact: Remote: Arbitrary File Download, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC IMC SOM 7.3 E0501 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12555 |...

HPESBHF03777 rev.2 - HPE Intelligent Management Center (iMC) PLAT, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12559 |...

HPESBHF03782 rev.1 - HPE intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12554 |...

HPESBHF03781 rev.1 - HPE intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P4 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12561 |...

HPESBMU03753 rev.4 - HPE System Management Homepage for Windows and Linux, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Elevation of Privilege, Execution of Arbitrary Code; Remote: Authentication Bypass, Cross-Site Scripting XSS, Denial of Service DoS, Disclosure of Sensitive Information, Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted...

HPESBNS03775 rev.1 - HPE NonStop Samba, Remote Disclosure of Information, Authentication Bypass, Unauthorized Elevation of Privilege

Potential Security Impact: Remote: Authentication Bypass, Disclosure of Information, Unauthorized Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop L-Series: T1201L01 through T1201L01^AAO; H and J-Series: T1201H01 through T1201H01^AAN CVSS...

HPESBUX03772 rev.1 - HP-UX BIND Service Running Named, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Read Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX DNS and BIND Software B.11.31 - BIND 9.9.4 prior to C.9.9.4.11.0 and BIND 9.11.1 prior to C.9.11.1.2.0 CVSS Scores: | CVE | CVSS Vector ...

HPESBHF03705 rev.4 - HPE Integrated Lights-Out 4, 3, 2 and Moonshot Remote Console Administrator (iLO 4 and MRCA) Remote Disclosure of Information

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Remote Console Administrator Prior to 2.50 HP Integrated Lights-Out 4 iLO 4, Prior to 2.53 HP Integrated Lights-Out 3 iLO 3, Firmware for ProLiant G7 Servers Prior...

HPESBHF03769 rev.4 - HPE Integrated Lights-out 4 (iLO 4), Moonshot, and NonStop Systems, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 4 iLO 4 Prior to 2.53 HPE ProLiant m510 Server Cartridge Prior to 2.56 HPE ProLiant m710x Server Blade Prior to 2.56 CLIM BIOS and iLO...

HPESBHF03770 rev.1 - HPE Comware 7 MSR Routers using PHP, Go, Apache Http Server, and Tomcat, Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products V7 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5385 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L | 5.6 | |...

HPESB3P03762 rev.1 - HPE C Switch Software using Cisco Prime Data Center Network Manager (DCNM), Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP C-series Switch Software Data Center Network Manager Version 10.11, 10.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-6639 |...

HPESBGN03765 rev.2 - HPE LoadRunner and HPE Performance Center, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Performance Center - All versions HP LoadRunner - All versions CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-2183 |...

HPESBHF03763 rev.1 - HPE Comware 7, IMC, VCX products using OpenSSL, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products See resolution section for impacted versions HP Intelligent Management Center iMC See resolution section for impacted versions VCX Products 9.8.19 CVSS...

HPESBHF03766 rev.1 - HPE ConvergedSystem 700 Solution with Comware v5 Switches using NTP, Remote Denial of Service (DoS), Unauthorized Modification and Local Denial of Service (DoS)

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 1.0 HP ConvergedSystem 700 for Virtualization 1.0 HP ConvergedSystem 700x 1.0 HP ConvergedSystem...

HPESBHF03765 rev.1 - HPE ConvergedSystem 700 Solution with Comware v7 Switches using OpenSSL, Remote Denial of Service (DoS) and Disclosure of Sensitive Information

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 for Virtualization 1.0 HP ConvergedSystem 700 for Virtualization 1.1 1.1 HP ConvergedSystem 700 Virtualization 2.0...

HPESBGN03764 rev.2 - HPE LoadRunner and Performance Center, Remote Cross-Site Scripting (XSS)

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE LoadRunner - v12.53 and earlier HPE Performance Center - v12.53 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8953 |...

HPESBHF03764 rev.3 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC PLAT 7.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8954 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | 10....

HPESBGN03763 rev.1 - HPE SiteScope, Disclosure of Sensitive Information, Bypass Security Restriction, Remote Arbitrary Code Execution

Potential Security Impact: Local: Bypass Security Restrictions, Disclosure of Sensitive Information; Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP SiteScope Monitors Software Series - v11.2x, v11.3x CVSS Scores: | CVE | CVSS Vector | Base Scor...

HPESBGN03762 rev.1 - HPE Network Node Manager i (NNMi) Software, Remote Bypass Security Restrictions, Cross-Site Scripting (XSS), URL Redirection

Potential Security Impact: Remote: Bypass Security Restrictions, Cross-Site Scripting XSS, URL Redirection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Network Node Manager I NNMi Software - v10.0x, v10.1x, v10.2x CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- ...

HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege

Potential Security Impact: Remote: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloud Optimizer - v1.10, v1.20, v2.0, v2.01, v2.10, v2.20/ CO – v3.0, v3.01 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...

HPESBHF03760 rev.1 - HPE Network Products including Comware 7 running NTP, Remote Unauthorized Data Injection

Potential Security Impact: Remote: Unauthorized Data Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products All versions - Please refer to the RESOLUTION below for a list of updated products. CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...

HPESBUX03759 rev.2 - HP-UX CIFS Sever using Samba, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Code Execution, Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Common Internet File System CIFS, Client/Server Software For HPE CIFS SERVER B.04.05.x release up-to version B.04.05.03.00 and all...

HPESBUX03747 rev.1 - HP-UX running BIND, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX DNS and BIND Software B.11.31 - BIND 9.9.4 prior to C.9.9.4.10.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-3135 |...

HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products All versions - Please refer to the RESOLUTION below for a list of updated products. Comware v5 CW5 Products All versions - Please refer to the RESOLUTIO...

HPESBNS03755 rev.2 - HPE NonStop Server using Samba, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop L Series: T1201L01 through T1201L01^AAL, H and J Series: T1201H01 through T1201H01^AAM CVSS Scores: | CVE ...

HPESBHF03756 rev.1 - HPE Network Products including Comware 7, iMC, and VCX running OpenSSL, Remote Denial of Service (DoS), Disclosure of Sensitive Information

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. VCX Products All versions - Please refer to the RESOLUTION below for a list of updated products. Comware v7 CW7 Products All versions -...

HPESBGN03737 rev.1 - HPE IceWall Federation Agent, Remote Unauthorized Disclosure of Information, Unauthorized Modification

Potential Security Impact: Remote: Unauthorized Disclosure of Information, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall Federation Agent Version 3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8945 |...

HPESBGN03749 rev.1 - HPE Server Automation, using Apache Struts, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Server Automation Software Series - v9.1x, v10.0x, v10.1x, v10.2x, v10.5x CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5638 |...

HPESBGN03748 rev.1 - HPE Cloud Optimizer, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloud Optimizer v3.0x CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8944 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5 |...

HPESBHF03745 rev.3 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC All versions prior to IMC PLAT 7.3 E0504P04 - Please refer to the RESOLUTION below for a list of impacted products. CVSS Scores: | CVE | CVSS Vect...

HPESBGN03742 rev.1 - HP Operations Analytics using Linux, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Operations Analytics Software - v2.2, v2.3, v2.31, v2.31 IP1, v2.31 IP2, v2.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...

HPESBST03739 rev.1 - HPE StoreFabric B-series Switches, Remote Elevation of Privilege

Potential Security Impact: Remote: Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. StoreFabric B-series Switches - All versions prior to FOS v7.4.1d and v8.0.1b CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-8202 |...

HPESBNS03735 rev.1 - HPE NonStop Servers using SSH Service, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop Servers L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA - SSH Service CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...