HPESBST04254 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v8.0.1b and v7.4.1d, Disclosure of Privileged Information

Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN6000B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN3600B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN4000B SAN Extension Switch...

HPESBGN04246 rev.1 - Hewlett Packard Enterprise iLO Amplifier Pack, Remote Buffer Overflow

Potential Security Impact: Remote: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Prior to 2.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-29220 | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H | 6.6 |...

HPESBNW04237 rev.4 - HPE Aruba Analytics and Location Engine, Aruba Central On Prem (COP), and Aruba ClearPass Policy Manager, PwnKit (Polkit) Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Engine 2.2.0.1 and below Aruba ClearPass Policy Manager 6.10.3 and all previous versions Aruba Central On-Premises 2.5.x.x: 2.5.4.2 and below CVSS...

HPESBGN04226 rev.2 - HPE enhanced Interactive Unified Mediation (eIUM), Apache Log4j 2 Remote Arbitrary Code Execution and Remote Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Enhanced Interactive Unified Mediation eIUM 9.x, 10.6.3 - 9.x version is vulnerable only if Infinispan cache or CIS module is used CVSS Scores: | CVE |...

HPESBGN04219 rev.2 - HPE 3PAR Service Processors, Apache Log4j 2 Remote Arbitrary Code Execution and Remote Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors - SP 5.x version Prior to 5.0.9.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-44228 |...

HPESBHF04197 rev.1 - HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus, Local Bypass of Security Restrictions

Potential Security Impact: Local: Bypass Security Restrictions, Compromise of System Integrity, Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Server - Prior to system ROM v2.52 HPE ProLiant ML30...

HPESBNW04204 rev.1 - HPE 6120XG Switches, Remote Unauthenticated Disclosure of Information

Potential Security Impact: Remote: Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 6120XG Blade Switch firmware Z.14.58 or earlier HPE ProCurve 6120XG Blade Switch for Integrity Servers firmware Z.14.58 or earlier CVSS Scores: | CVE |...

HPESBHF04199 rev.1 - HPE Superdome Flex Server, Remote Cross Site scripting (XSS) vulnerability

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to Version 3.40.106 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26589 |...

HPESBST04191 rev.2 - HPE 3PAR StoreServ, HPE Primera Storage and HPE Alletra 9000 Storage Arrays, Remote Unauthenticated Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP 3PAR StoreServ 10000 Storage 3.3.1 MU1 up to 3.3.1 MU2 P157 or 3.3.1 up to 3.3.1 MU5 P156 or 3.3.1 MU1 up to 3.3.2 GA P01 - the vulnerability was introduced in 3.3.1 MU1...

HPESBNW04186 rev.2 - HPE Aruba Analytics and Location Engine (ALE), Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Engine - Prior to 2.1.0.4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3156 |...

HPESBGN04180 rev.2 - HPE Edgeline Infrastructure Manager, Remote Disclosure of Sensitive Information

Potential Security Impact: Remote: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline Infrastructure Management Software - Prior to 1.24 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26586 |...

HPESBMU04179 rev.1 - HPE IceWall Products Using OpenSSL, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO certd 11.0 RHEL 8 and Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3449 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | 5...

HPESBHF04182 rev.1 - HPE Superdome X Servers, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Superdome X Base Enclosure - Prior to Bundle 8.8.50 HPE Integrity Superdome X Server - Prior to Bundle 8.8.50 HPE Integrity Superdome X with BL920s Blades - Prior to Bundle...

HPESBHF04165 rev.1 - HPE Edgeline m710x Gen9 Servers Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Blade - Prior to version H07 1.90 HPE ProLiant m710x-L Server Blade - Prior to version H07 1.90 CVSS Scores: | CVE | CVSS...

HPESBUX04160 rev.2 - HP-UX OpenSSL, Multiple Vulnerabilities

Potential Security Impact: Local: Unauthorized Access to Diagnostic Data, Unauthorized Arbitrary File Creation, Unqualified Configuration Change; Remote: Unauthorized Access to Diagnostic Data, Unauthorized Arbitrary File Creation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed...

HPESBHF04150 rev.1 - HPE Gen10 Servers with Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Server - Prior to version 2.50 HPE ProLiant DL380 Gen10 Server - Prior to version 2.50 HPE ProLiant...

HPESBST04138 rev.1 - HPE 3Par and Primera StoreServ Management Console (SSMC) using sudo, Local Buffer Overflow

Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR StoreServ Management and Core Software Media SSMC prior to 3.8 are vulnerable CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3156 |...

HPESBHF04149 rev.1 - HPE StoreOnce Systems using HPE Integrated Lights-Out 5 (iLO 5), Multiple Remote and Local vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreOnce 5650 - Prior to 4.3.0 HPE StoreOnce 5200 - Prior to 4.3.0 HPE StoreOnce 3640 - Prior to 4.3.0...

HPESBHF04039 rev.3 - HPE Synergy Composer 2, Ripple20 Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Information, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy Composer 2 - Prior to Composer software release 5.40.00 CVSS Scores: | CVE | CVSS Vector | Base...

HPESBHF03986 rev.1 - HPE Superdome X servers with iLO4, Remote Code Execution and Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass, Code Execution, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity Superdome X Server prior to 8.8.14 HPE Integrity Superdome X with BL920s Blades prior to 8.8.14 HPE Integrity Superdome...

HPESBNS03981 rev.1 - HPE ViewPoint on NonStop, Local Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Web ViewPoint Enterprise T0986 - L Series: T0320L01^ABP through T0320L01^ABZ; J and H Series: T0986H01 through T0986H01^AAE Web ViewPoint Plus T0952 - L Series:...

HPESBGN03975 rev.1 - HPE enhanced Internet Usage Manager (eIUM), Remote Cross Site Scripting

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE enhanced Internet Usage Manager eIUM 8.3, 9.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-11997 |...

HPESBUX03962 rev.2 - HP-UX NTP service, multiple vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Buffer Overflow; Remote: Compromise of System Integrity, Denial of Service DoS, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX NTP Software Prior to C.4.2.8.4.0 CVSS Scores: | CVE | CVSS Vector | Base...

HPESBHF03944 rev.1 - HPE HP2910al-48G switches, local Arbitrary Command Execution

Potential Security Impact: Local: Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP 2910-48G al Switch W.15.14.0016 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-5401 | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L | 6.3...

HPESBST03918 rev.1 - HPE 3PAR Service Processor (SP), remote Disclosure of Privileged Information

Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors version 4.1 through 4.4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-11991 |...

HPESBHF03937 rev.1 - HPE UIoT Unauthorized Remote Access and Access to Sensitive Information

Potential Security Impact: Remote: Unauthorized Access to Sensitive Information, Unauthorized Data Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE IOT + GCP - 1.6, 1.5, 1.4.0, 1,4,1, 1.4.2, 1.2.4.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBST03911 rev.1 - HPE Command View AE (CVAE) Products, multiple vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP XP Command View Advanced Edition 1TB 0-500TB Enterprise LTU - 8.6.2-01 or later HP XP Command View Advanced Edition Software - 8.6.2-01 or later HP XP Command View...

HPESBHF03904 rev.1 - HPE Service Pack for ProLiant (SPP) Bundled Software, Local Access Restriction Bypass

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Service Pack for ProLiant Prior to version 2018.09.027 Sep 2018 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7118 |...

HPESBHF03874 rev.1 - Certain HPE Products using Intel-based Processors, L1 Terminal Fault (L1TF) Speculative Side-channel Vulnerabilities, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL580 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL560 Gen10 Server - Prior to 1.4206-20-20184 Jul 2018 HPE ProLiant DL380 Gen10 Server - Pri...

HPESBST03880 rev.1 - HPE XP P9000 Command View Advanced Edition (CVAE), Local and Remote Unauthorized Access to Sensitive Information

Potential Security Impact: Local: Unauthorized Access to Sensitive Information; Remote: Unauthorized Access to Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE XP P9000 Command View Advanced Edition Software Licenses All CVSS Scores: | CVE | CVSS Vector |...

HPESBST03881 rev.1 - HPE Command View Advanced Edition (CVAE), Local and Remote Access Restriction Bypass

Potential Security Impact: Local: Access Restriction Bypass; Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE XP7 Command View Advanced Edition Suite all CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-3736 |...

HPESBHF03893 rev.1 - HPE Intelligent Management Center (iMC) Wireless Services Manager Software, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE IMC Wireless Services Manager Software - Prior to IMC WSM 7.3 E0506P02 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7103 |...

HPESBHF03883 rev.1 - HPE Comware 5 and Comware 7 Products using NTP, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 12500 Main Processing Unit with Comware v7 Operating System All versions Comware v5 CW5 Products All versions CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...

HPESBHF03887 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Arbitrary File Modification

Potential Security Impact: Remote: Arbitrary File Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC Plat 7.3 E0506P09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7102 |...

HPESBHF03871 rev.1 - Certain HPE Altoline Switches using Microprocessors with Speculative Execution, Local Unauthenticated Information Disclosure (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754)

Potential Security Impact: Local: Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Altoline 6920 48XG 6QSFP+ x86 ONIE AC Back-to-Front Switch BIOS versions prior to Build 20180212, e.g. A02 - Refer to the BIOS version and Build Date in...

HPESBNW03865 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC - Prior to PLAT 7.3 E0605P04 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-17485 |...

HPESBHF03863 rev.1 - HPE Intelligent Management Center (iMC), Remote Cross-site Scripting (XSS)

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC PLAT v7.3 E0506 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7075 |...

HPESBHF03856 rev.1 - Comware v7 and Intelligent Management Center Products, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC 7.3 - IMC PLAT HPE FlexFabric 12500 Switch Series Comware 7 - Detailed list of switches provided below HPE FlexNetwork 10500 Switch...

HPESBHF03831 rev.1 - HPE Integrated Lights-Out 2 (iLO 2), Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 2 iLO 2 prior to 2.33 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2015-4000 |...

HPESBHF03814 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Unauthorized Modification

Potential Security Impact: Remote: Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC PLAT 7.3 E0506 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2004-2761 |...

HPESBNS03775 rev.1 - HPE NonStop Samba, Remote Disclosure of Information, Authentication Bypass, Unauthorized Elevation of Privilege

Potential Security Impact: Remote: Authentication Bypass, Disclosure of Information, Unauthorized Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop L-Series: T1201L01 through T1201L01^AAO; H and J-Series: T1201H01 through T1201H01^AAN CVSS...

HPESBHF03760 rev.1 - HPE Network Products including Comware 7 running NTP, Remote Unauthorized Data Injection

Potential Security Impact: Remote: Unauthorized Data Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products All versions - Please refer to the RESOLUTION below for a list of updated products. CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...

HPESBUX03747 rev.1 - HP-UX running BIND, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX DNS and BIND Software B.11.31 - BIND 9.9.4 prior to C.9.9.4.10.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-3135 |...

HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products All versions - Please refer to the RESOLUTION below for a list of updated products. Comware v5 CW5 Products All versions - Please refer to the RESOLUTIO...

HPESBUX04652 rev.1 - HP-UX 11i v3 Tomcat-based Servlet Engine, Multiple Vulnerabilities

Potential Security Impact: Local: Authentication Bypass, Denial of Service DoS, Disclosure of Information, Unauthorized Access, Insecure Deserialization; Remote: Authentication Bypass, Denial of Service DoS, Disclosure of Information, Unauthorized Access, Insecure Deserialization SUPPORTED SOFTWA...

HPESBHF04561 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-00828, 2023.3 IPU - Intel Processor Advisory, (GDS/Gather/Downfall), Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to HPE OmniStack Firmware Version 20230913 HPE SimpliVity 380 Gen10 G - Prior to HPE OmniStack Firmware Version 20230913 HPE SimpliVity 380...

HPESBHF04552 rev.1 - Certain HPE ProLiant DL/ML and Microservers Using Certain Intel Processors, INTEL-SA-00950, 2023.4 IPU Out-of-Band (OOB) - Intel Processor Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server - Prior to 1.9010-19-2023 HPE ProLiant DL380 Gen10 Plus server - Prior to...

HPESBGN04548 rev.2 - HPE OneView, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView All versions prior to 6.60.06, 8.60.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2023-30912 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H ...

HPESBNS04339 rev.1 - Certain HPE NonStop Products Using Certain Intel Processors, INTEL-SA-00615, 2022.1 IPU – Intel Processors MMIO Stale Data Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity NonStop BladeSystem NB56000c - Please refer to the entries for HPE NonStop Network and Storage CLIMs HPE Integrity NonStop NS2400 - Please refer to the entries...

HPESBNS04340 rev.1 - Certain HPE NonStop Products Using Intel Xeon Processors, INTEL-SA-00616, 2022.1 IPU - Intel Xeon Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE NonStop NS8 X4 CPU - Prior to 2.6605-17-2022 - SPR T0918L02^AAR HPE NonStop NS4 X4 CPU - Prior to 2.6605-17-2022 - SPR T0918L02^AAR HPE NonStop NS...