HPESBNW04270 rev.2 - HPE Aruba Instant On 1930 switch, Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Instant On 1930 Switch Series - Firmware below v1.0.7.0 - see note in summary Affected Products Aruba Instant On 1930 switches firmware versions 1.0.7.0 and below when...

HPESBNW04271 rev.2 - HPE Aruba Networking Products, Multiple CVEs involving Spring Cloud and Spring Framework

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager none - no impact CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-22947 |...

HPESBHF04266 rev.1 - HPE Superdome Flex and Superdome Flex 280 Servers, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to 3.50.58 HPE Superdome Flex 280 Server - Prior to 1.20.204 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBGN04252 rev.1 - HPE OneView, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Unauthorized Read Access to Files, Authentication Restriction Bypass; Remote: Cross-Site Scripting XSS, Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - Prior to 6.6 CVSS Scores: | CVE | CVSS...

HPESBST04261 rev.1 - HPE B-Series SANnav Management Software - Security Advisory for Apache Log4j Vulnerability

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav Management Software 2.2.0, 2.1.1.x including patches 2.1.1.1 - 2.1.1.6, 2.1.0x including patch 2.1.0a and 2.0.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- ...

HPESBST04258 rev.1 - HPE Nimble Storage and HPE Alletra 6000 Peer Persistence Witness OVA Using Polkit's Pkexec, Local Elevated Privileges

Potential Security Impact: Local: Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 6000 v5.2.1.0, v5.3.x, v6.0.0.0 HPE Nimble Storage Hybrid Flash Arrays v5.2.1.0, v5.3.x, v6.0.0.0 Nimble Storage All Flash Arrays v5.2.1.0, v5.3.x, v6.0.0.0 CVSS Score...

HPESBNS04260 rev.1 - HPE Virtualized Converged NonStop X NS2 VHOST CLIMs Using PolKit's Pkexec Utility, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. CLIM DVD Installation Software T0853 T0853L03^DBA - T0853L03^DCH CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-4034 |...

HPESBCR04221 rev.1 - HPE Cray System Software, Apache Log4j 2, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Command Execution, Code Execution, Denial of Service DoS, SQL Injection, Insecure Deserialization SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Cray View for ClusterStor Versions 1.3.1 HPE Data Management Framework 7 Versions 7.x Cray...

HPESBNW04259 rev.2 - HPE Aruba 4100i, 6100, 6200, 6300, 6400, 8320, 8325, 8360, and 8400 Model Switches, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Unauthenticated Arbitrary Code Execution; Remote: Arbitrary Command Execution, Denial of Service DoS, Directory Traversal, Unauthorized Disclosure of Information, script injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are...

HPESBGN04228 rev.1 - HPE OneView Global Dashboard, Remote Cross-Site Scripting (XSS) and URL Redirection Vulnerabilities

Potential Security Impact: Remote: Cross-Site Scripting XSS, URL Redirection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView Global Dashboard - Prior to 2.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-29216 |...

HPESBHF04241 rev.1 - HPE Universal IoT (UIoT) Log4j, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Universal IoT UioT Platform UIoT 1.8.1 and below CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBST04254 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v8.0.1b and v7.4.1d, Disclosure of Privileged Information

Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN6000B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN3600B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN4000B SAN Extension Switch...

HPESBST04255 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v8.2.1c, v8.1.2h, and all versions of Brocade Fabric OS v8.0.x and v7.x, Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN6000B Fibre Channel Switch -Prior to v8.2.1C, v8.1.2h HPE B-series SN3600B Fibre Channel Switch -Prior to v8.2.1C, v8.1.2h HPE B-series SN4000B SAN Extension...

HPESBGN04246 rev.1 - Hewlett Packard Enterprise iLO Amplifier Pack, Remote Buffer Overflow

Potential Security Impact: Remote: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Prior to 2.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-29220 | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H | 6.6 |...

HPESBHF04249 rev.1 - HPE Integrated Lights-Out 4 (iLO 4), Remote Host Header Injection Vulnerability

Potential Security Impact: Remote: Host Header Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 4 iLO 4 - Prior to 2.60 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-23701 |...

HPESBHF04251 rev.2 - HPE Gen10 and Gen10 Plus Synergy Servers Using Integrated Lights-Out 5 (iLO 5), Remote Buffer Overflow

Potential Security Impact: Remote: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Compute Module - Prior to iLO 5 v2.60a HPE Synergy 660 Gen10 Compute Module - Prior to iLO 5 v2.60a HPE Synergy 480 Gen10 Plus Compute Module - Prior to iLO 5...

HPESBNS04250 rev.1 - HPE Samba on NonStop, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Elevation of Privilege, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop T1201L02, T1201L02^AAR, T1201L02^AAS; T120L01 - T1201L01^AAO; T1201J01, T1201J01^AAT; T1201H01 -...

HPESBHF04244 rev.4 - Certain HPE Servers using certain Intel Processor BIOS, Intel Processor Breakpoint Control Flow Advisory, Intel-SA-00532, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.6001132022 HPE ProLiant DL20 Gen10 Server - Prior to 2.5601202022 HPE ProLiant DL160 Gen10 Server - Prior to 2.6001132022 HPE...

HPESBHF04243 rev.3 - Certain HPE Servers using certain Intel Processor BIOS, INTEL-SA-00527, 2021.2 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4510 Gen10 System - Prior to 2.6001132022 HPE ProLiant BL460c Gen10 Server Blade - Prior to 2.6001132022 HPE...

HPESBHF04242 rev.4 - Certain HPE Servers using certain Intel Chipset Firmware, INTEL-SA-00470, 2021.2 IPU, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m750 Server Blade - Prior to SPSE305.01.04.400 HPE ProLiant MicroServer Gen10 Plus - Prior to...

HPESBNW04238 rev.3 - HPE ArubaOS-CX 8000 Series Switches, Multiple UEFI Vulnerabilities

Potential Security Impact: Local: Access Restriction Bypass, Arbitrary Code Execution, Compromise of System Integrity, Elevated Privileges, Gain Extended Privileges, Increase in Privilege, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 8400 Switch Series s...

HPESBNW04239 rev.3 - HPE Aruba 9000 Series Gateways, Multiple UEFI Vulnerabilities

Potential Security Impact: Local: Access Restriction Bypass, Arbitrary Code Execution, Compromise of System Integrity, Elevated Privileges, Gain Extended Privileges, Increase in Privilege, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 9000 Gateway - See...

HPESBNW04237 rev.4 - HPE Aruba Analytics and Location Engine, Aruba Central On Prem (COP), and Aruba ClearPass Policy Manager, PwnKit (Polkit) Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Engine 2.2.0.1 and below Aruba ClearPass Policy Manager 6.10.3 and all previous versions Aruba Central On-Premises 2.5.x.x: 2.5.4.2 and below CVSS...

HPESBNW04234 rev.1 - HPE FlexNetwork 5130 EL Switch Series, Local Buffer Overflow

Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE FlexNetwork 5130 EI Switch Series - Prior to 5130EI7.10.R3507P02 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-29219 |...

HPESBGN04233 rev.1 - HPE Agentless Management Service for Windows, Unquoted Search Path

Potential Security Impact: Local: Unquoted Search Path SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Agentless Management - Prior to 1.44.0.0, 10.96.0.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-29218 |...

HPESBGN04232 rev.1 - HPE Network Functions, Apache Log4j 2 Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified Data Management UDM 1.2009.0, 1.2101.0, 1.2103.0, 1.2105.0, 1.2107.0, 1.2109.0, 1.2109.1 HPE Authentication Server Function AUSF 1.2009.0, 1.2101.0, 1.2103.0,...

HPESBGN04230 rev.1 - HPE Fraud Risk Management Software Series, Apache Log4j 2 Remote Arbitrary Code Execution and Remote Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Fraud Risk Management Software Series 14.x HPE Revenue Intelligence Software Series - HPE Fraud Risk Management FRM 14.x CVSS Scores: | CVE | CVSS Vector...

HPESBEZ04196 rev.2 - HPE Ezmeral Data Fabric, Remote Access Restriction Bypass

Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ezmeral Data Fabric - Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch Tez-0.9: mapr-tez-0.9.201907090334-1.noarch Tez-0.9.2: mapr-tez-0.9.2.0.201907081043-1.noarch...

HPESBUX04206 rev.2 - HP-UX Telnetd, Remote Execution of Arbitrary Code

Potential Security Impact: Remote: Arbitrary Code Execution, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX 11.31 PHNE42509 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-10188 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |...

HPESBGN04214 rev.1 - HPE Edgeline Integrated System Manager (iSM) for Edgeline EL300 Using DNSmasq and Nginx, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Unauthorized Data Access, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline EL300 Converged Edge System - Prior to v1.50 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBGN04227 rev.1 - HPE Edge Infrastructure Automation, Apache Log4j 2 Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edge Infrastructure Automation - Prior to 2.0.6.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBGN04226 rev.2 - HPE enhanced Interactive Unified Mediation (eIUM), Apache Log4j 2 Remote Arbitrary Code Execution and Remote Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Enhanced Interactive Unified Mediation eIUM 9.x, 10.6.3 - 9.x version is vulnerable only if Infinispan cache or CIS module is used CVSS Scores: | CVE |...

HPESBGN04225 rev.1 - HPE Trueview Inventory Software Series, Apache Log4j 2 Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Trueview Inventory Software Series - Prior to 8.6.22.1 and 8.7.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | ---...

HPESBGN04223 rev.1 - HPE Remote SIM Provisioning Manager (RSPM), Apache Log4j 2 Remote Arbitrary Code Execution and Remote Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Remote SIM Provisioning Manager RSPM - RSPM1.3.2, RSPM1.4.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-44228 |...

HPESBGN04219 rev.2 - HPE 3PAR Service Processors, Apache Log4j 2 Remote Arbitrary Code Execution and Remote Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processors - SP 5.x version Prior to 5.0.9.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-44228 |...

HPESBGN04222 rev.1 - HPE Dynamic SIM Provisioning (DSP), Apache Log4j 2 Remote Arbitrary Code Execution and Remote Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Dynamic SIM Provisioning DSP - DSP3.3, DSP3.1, DSP3.4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-44228 |...

HPESBGN04224 rev.1 - HPE Real Time Management System (RTMS), Apache Log4j 2 Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Real Time Management System RTMS - Prior to RTMS 3.00.72.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBGN04217 rev.2 - HPE Telco Service Orchestrator SO, Apache Log4j 2 Remote Arbitrary Code Execution and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - 3.7.1 - Closed Loop snmp adapter CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-44228...

HPESBGN04218 rev.2 - HPE 3PAR/Primera StoreServ Management Console (SSMC), Apache Log4j 2 Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreServ Management Console SSMC -Prior to v3.8.2.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-44228 |...

HPESBNW04216 rev.3 - HPE Aruba Silver Peak Orchestrator and Aruba IntroSpect, Apache Log4j Library Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Silver Peak Orchestrator - All customer managed Orchestrator and legacy GMS products are affected by these vulnerabilities Aruba...

HPESBGN04215 rev.12 - Certain HPE Products using Apache Log4j, Remote Arbitrary Code Execution, Remote Code Execution, and Remote Denial of Service

Potential Security Impact: Remote: Arbitrary Code Execution, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE XP Performance Advisor Software - 7.5 through 8.4 HPE SimpliVity 380 Gen10 VMware environment HPE SimpliVity 380 Gen9 VMware...

HPESBHF04211 rev.1 - HPE Gen10 and Gen10 Plus Servers Using Integrated Lights-Out 5 (iLO 5), Remote Buffer Overflow

Potential Security Impact: Remote: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant BL460c Gen10 Server Blade - Prior to v2.60 HPE ProLiant DL580 Gen10 Server - Prior to v2.60 HPE ProLiant DL560 Gen10 Server - Prior to v2.60 HPE ProLiant DL385 Gen10 Plu...

HPESBST04207 rev.1 - HPE StoreServ Management Console (SSMC), Authenticated Code Injection Leading to Privilege Elevation

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreServ Management Console SSMC 3.4 GA to 3.8.1 HPE 3PAR StoreServ Management and Core Software Media 3.4 GA to 3.8.1 CVSS Scores: | CVE | CVSS Vector | Base Score | |...

HPESBST04210 rev.1 - HPE Fibre Channel Host Bus Adapters Emulex HBA Manager, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Arbitrary File Download, Arbitrary File Modification, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 8Gb PCIe Host Bus Adapters - Prior to Emulex HBA Manager 12.8.542.26 - Please see VULNERABILTY SUMMARY section for model...

HPESBHF04209 rev.1 - HPE ProLiant and Apollo Gen10 and Gen10 Plus Servers Using Certain AMD EPYC Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Authentication Bypass, Denial of Service DoS, Disclosure of Information, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Server - Prior to version 2.52 HPE ProLiant DL325 Gen10 Plu...

HPESBHF04192 rev.2 - HPE ProLiant and ProLiant Server Blades, Apollo, and Synergy Gen10 and Gen10 Plus Servers, Multiple Local Vulnerabilities in UEFI BIOS

Potential Security Impact: Local: Authentication Bypass, Escalation of Privilege, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Server - Prior to v2.50 HPE ProLiant DL160 Gen10 Server - Prior to v2.52 HPE ProLiant DL180 Gen10 Server - Prio...

HPESBHF04195 rev.1 - HPE ProLiant Gen10 Plus Servers Using Certain AMD EPYC Gen3 Processor, Local code execution

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus v2 server - Prior to Version 2.50 HPE ProLiant DL385 Gen10 Plus v2 server - Prior to Version 2.50 HPE ProLiant XL645d Gen10 Plus Server - Prior ...

HPESBHF04208 rev.1 - HPE ProLiant, Apollo, Edgeline, and Synergy Servers Using Certain Intel Processors, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 System - Prior to 2.5610-28-2021 8 Nov 2021 HPE Apollo 4200 Gen10 Server - Prior to 2.5610-28-2021 8 Nov 2021 HPE Apollo 6500 Gen10 System - Prior to...

HPESBHF04205 rev.1 - HPE Edgeline EL300 Converged Edge Systems Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline EL300 Converged Edge System Prior to BIOS: EL011.40 09/25/2021; prior to ME: v11.8.86.3909 CVSS Scores: | CVE | CVSS Vector | Base Scor...

HPESBGN04189 rev.1 - Hewlett Packard Enterprise iLO Amplifier Pack, Directory Traversal Remote Code Execution Vulnerability

Potential Security Impact: Remote: Directory Traversal SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Ver 1.80, Ver 1.81, Ver 1.90, and Ver 1.95 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-29212 |...