HPESBHF04197 rev.1 - HPE ProLiant DL20 Gen10, HPE ProLiant ML30 Gen10, and HPE ProLiant MicroServer Gen10 Plus, Local Bypass of Security Restrictions

Potential Security Impact: Local: Bypass Security Restrictions, Compromise of System Integrity, Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Server - Prior to system ROM v2.52 HPE ProLiant ML30...

HPESBNW04204 rev.1 - HPE 6120XG Switches, Remote Unauthenticated Disclosure of Information

Potential Security Impact: Remote: Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 6120XG Blade Switch firmware Z.14.58 or earlier HPE ProCurve 6120XG Blade Switch for Integrity Servers firmware Z.14.58 or earlier CVSS Scores: | CVE |...

HPESBHF04199 rev.1 - HPE Superdome Flex Server, Remote Cross Site scripting (XSS) vulnerability

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to Version 3.40.106 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26589 |...

HPESBNW04203 rev.2 - HPE Aruba ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Local: Escalation of Privilege; Remote: Arbitrary Command Execution, Authentication Bypass, Directory Traversal, Disclosure of Sensitive Information, SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager - - ClearPa...

HPESBUX04198 rev.1 - HPE HP-UX Web Server Suite Software using PHP, Remote Null Pointer Dereference

Potential Security Impact: Remote: Null pointer dereference SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Web Server Suite Software HP-UX PHP 7.4.7.1.1 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-21702 |...

HPESBNS04202 rev.1 - HPE NonStop SSL Toolkit, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. SSL TOOLKIT T2813 - T2813L02 through T2813L02^AAQ CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3711 |...

HPESBST04191 rev.2 - HPE 3PAR StoreServ, HPE Primera Storage and HPE Alletra 9000 Storage Arrays, Remote Unauthenticated Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP 3PAR StoreServ 10000 Storage 3.3.1 MU1 up to 3.3.1 MU2 P157 or 3.3.1 up to 3.3.1 MU5 P156 or 3.3.1 MU1 up to 3.3.2 GA P01 - the vulnerability was introduced in 3.3.1 MU1...

HPESBNW04201 rev.2 - HPE Aruba Instant (IAP), Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Command Execution, Denial of Service DoS, Disclosure of Sensitive Information, Unauthorized Read Access to Files, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 100 Series Access Points - See Details section for...

HPESBST04176 rev.1 - HPE StoreOnce, Remote DOM-based Cross Site Scripting

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreOnce 5200 FW version: 4.2.3 and earlier HPE StoreOnce 5650 FW version: 4.2.3 and earlier HPE StoreOnce 5250 FW version: 4.2.3 and earlier HPE StoreOnce 3640 FW...

HPESBNW04190 rev.3 - HPE ArubaOS, SD-WAN Software and Gateways, Multiple Vulnerabilities

Potential Security Impact: Local: Directory Traversal; Remote: Arbitrary Command Execution, Cross-Site Request Forgery CSRF, Directory Traversal, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba SD-WAN Software and Gateways - Prior to 8.7.0.0-2.3.0.0,...

HPESBNW04188 rev.2 - Aruba AirWave Management Platform, Multiple Vulnerabilities

Potential Security Impact: Local: Authentication Bypass; Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform - Prior to 8.2.13.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3156 |...

HPESBNW04161 rev.1 - HPE FlexNetwork, FlexFabric, and MSR Switches and Routers, Multiple Local and Remote Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Buffer Overflow; Remote: Cross-Site Scripting XSS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE FlexFabric 12900E Switch Series - see table in RESOLUTION for the minimum Comware...

HPESBHF04187 rev.2 - SGI UV 300/3000 and HPE Integrity MC990 X Servers Using Certain Intel Processors, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrity MC990 X Server - Prior to firmware bundle 2021.07 SGI UV 300, 300H, 300RL, 30EX - Prior to firmware and diagnostic software 2021.07 SGI UV 3000 - Prior to firmwa...

HPESBNW04186 rev.2 - HPE Aruba Analytics and Location Engine (ALE), Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Engine - Prior to 2.1.0.4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3156 |...

HPESBGN04180 rev.2 - HPE Edgeline Infrastructure Manager, Remote Disclosure of Sensitive Information

Potential Security Impact: Remote: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline Infrastructure Management Software - Prior to 1.24 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26586 |...

HPESBST04142 rev.2 - HPE SAN Switches with Brocade Fabric OS (FOS) Prior to v7.4.2h, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Unauthorized Write Access to the File System; Remote: Authentication Bypass, Denial of Service DoS, Unauthorized Data Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Brocade 8Gb SAN Switch for HPE BladeSystem...

HPESBST04141 rev.3 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v8.2.3a, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Denial of Service DoS, Disclosure of Sensitive Information, User Validation Failure SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Brocade 16Gb Fibre Channel SAN Switch for HPE Synergy - Prior to 8.2.3a Brocade 16Gb SAN...

HPESBNW04185 rev.2 - HPE Aruba AOS-CX Switch Series, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Bypass Security Restrictions, Cross-Site Scripting XSS; Remote: Disclosure of Information, Execution of Arbitrary Commands SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 8400 Switch Series 10.04.xxxx - versions prior to 10.04.3070, 10.05.xx...

HPESBMU04179 rev.1 - HPE IceWall Products Using OpenSSL, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO certd 11.0 RHEL 8 and Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3449 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | 5...

HPESBNW04175 rev.1 - HPE OfficeConnect Network Switches, Remote Cross-Site Scripting and Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution, Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OfficeConnect 1850 24G 2XGT PoE+ 185W Switch - Prior to PC.01.17 HPE OfficeConnect 1850 24G 2XGT Switch - Prior to PC.01.17 HPE OfficeConnect...

HPESBHF04146 rev.1 - HPE Synergy Composer2 using Integrated Lights-Out 5 (iLO 5), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Cross-Site Scripting XSS, Buffer Overflow; Remote: Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - Prior to version 6.2 - Applicable only to HPE Synergy Composer2 appliance CVSS Scores: | CVE ...

HPESBST04170 rev.1 - HPE Simplivity 380 Gen9 Systems Using Certain Intel Processors, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen9 - Prior to version 2.90 HPE ProLiant XL170r Gen10 Server - Prior to version 2.90 HPE ProLiant XL190r Gen10 Server - Prior to version 2.90 CVSS Scores: ...

HPESBHF04171 rev.1 - HPE Gen10 Systems using certain Intel Processors, Local Arbitrary Code Execution

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Server - Prior to ROM v2.30 HPE ProLiant ML30 Gen10 Server - Prior to ROM v2.30 HPE Apollo 4200 Gen10 Server - Prior to ROM v2.50 HPE ProLiant BL460c...

HPESBST04169 rev.1 - HPE Simplivity 380 Gen10 Systems Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen10 - Prior to version 2.50 HPE SimpliVity 380 Gen10 G - Prior to version 2.50 HPE SimpliVity 2600 Gen10...

HPESBST04178 rev.1 - HPE SimpliVity Systems using VMware, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 2600 Gen10 - All active versions HPE SimpliVity 2600 - All active versions HPE SimpliVity 325 - All active versions HPE SimpliVity 380 Gen10 - All active versions HPE...

HPESBHF04182 rev.1 - HPE Superdome X Servers, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Superdome X Base Enclosure - Prior to Bundle 8.8.50 HPE Integrity Superdome X Server - Prior to Bundle 8.8.50 HPE Integrity Superdome X with BL920s Blades - Prior to Bundle...

HPESBNW04181 rev.2 - HPE Aruba ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Local: Escalation of Privilege; Remote: Arbitrary Command Execution, Authentication Bypass, Denial of Service DoS, SQL Injection, Insecure Deserialization SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager Platform - Prior to...

HPESBHF04148 rev.1 - HPE Integrity Integrated Lights-Out 4 (iLO 4) for Superdome X Servers, Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Superdome X Base Enclosure - Prior to Bundle 8.8.50 HPE Integrity Superdome X Server - Prior to Bundle 8.8.50 HPE Integrity Superdome X with BL920s Blades - Prior to Bundle 8.8....

HPESBNS04172 rev.2 - HPE BackBox Software, Remote Unauthorized Access

Potential Security Impact: Remote: Unauthorized Access, Unauthorized Access to Data, Unauthorized Data Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE BackBox Software T0954 T0954V04^AAO, T0954V04^AAQ, T0954V04^AAR and T0954V04^AAS CVSS Scores: | CVE | CVSS Vector...

HPESBST04167 rev.1 - HPE StoreEasy Gen10 Systems Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Storage File Controller Prior to version 2.50 HPE StoreEasy 1X60 Storage Prior to version 2.50 HPE StoreEasy 1450 Storage...

HPESBST04168 rev.1 - HPE StoreEasy Gen9 Systems Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1X30 Storage Prior to version 2.90 HPE StoreEasy 1X40 Storage Prior to version 2.90 HPE StoreEasy 1X50 Storage...

HPESBHF04162 rev.1 - HPE OneView Global Dashboard Release 2.31, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView Global Dashboard - only 2.31 - only version 2.31 is impacted. The issue is resolved in 2.32. CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | -...

HPESBHF04156 rev.1 - HPE Gen9 Servers Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant ML30 Gen9 Server - Prior to version 3.00 HPE ProLiant DL20 Gen9 Server - Prior to version 3.00 CVSS Scores: | CVE | CVSS Vector | Base...

HPESBHF04165 rev.1 - HPE Edgeline m710x Gen9 Servers Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Blade - Prior to version H07 1.90 HPE ProLiant m710x-L Server Blade - Prior to version H07 1.90 CVSS Scores: | CVE | CVSS...

HPESBHF04150 rev.1 - HPE Gen10 Servers with Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Server - Prior to version 2.50 HPE ProLiant DL380 Gen10 Server - Prior to version 2.50 HPE ProLiant...

HPESBHF04158 rev.1 - HPE Synergy Gen10 Servers Using Certain Intel Processor, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Compute Module - Prior to version 2.50 HPE Synergy 660 Gen10 Compute Module - Prior to version 2.50 CVS...

HPESBHF04155 rev.1 - HPE Gen10 Servers Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Server - Prior to version 2.3.0, and SPS v 05.01.04.303 HPE ProLiant ML30 Gen10 Server - Prior to...

HPESBHF04152 rev.1 - HPE Gen9 Servers Using Certain Intel Processors, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL450 Gen9 Server - Prior to version 2.90 HPE ProLiant XL270d Gen9 Special Server - Prior to version 2.90 HPE Apollo 4200 Gen9 Server - Prior to version 2.90 HPE...

HPESBHF04159 rev.1 - HPE Synergy Gen9 Servers Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen9 Compute Module - Prior to version 2.90 HPE Synergy 620 Gen9 Compute Module - Prior to version 2.90 HPE Synergy 660 Gen9 Compute Module - Prior to version...

HPESBHF04164 rev.1 - HPE Edgeline m750 Gen10 Servers Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m750 Server Blade - Prior to version H09 1.42 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-12357 |...

HPESBHF04157 rev.1 - HPE Edgeline Gen10 Servers Using Certain Intel Processor, Multiple Local Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant e910 Server Blade - Prior to version H08 1.88 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- ...

HPESBHF04163 rev.1 - HPE Edgeline m510 Gen9 Server Using Certain Intel Processors, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m510 Server Cartridge - Prior to version H05 1.86 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-12357 |...

HPESBUX04160 rev.2 - HP-UX OpenSSL, Multiple Vulnerabilities

Potential Security Impact: Local: Unauthorized Access to Diagnostic Data, Unauthorized Arbitrary File Creation, Unqualified Configuration Change; Remote: Unauthorized Access to Diagnostic Data, Unauthorized Arbitrary File Creation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed...

HPESBST04140 rev.3 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v9.0.1b, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Denial of Service DoS, User Validation Failure SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Brocade 32Gb Fibre Channel SAN Switch for HPE Synergy - Prior to 9.0.1b HPE B-series SN6700B Fibre Channel Switch - Prior to...

HPESBHF04143 rev.2 - HPE Integrated Lights-Out 4 (iLO 4) for Moonshot, Edgeline Cartridges and Blades, HPE Moonshot Chassis Management firmware, Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m510 Server Cartridge - Prior to version 2.64 for Moonshot/Edgeline HPE ProLiant m710x Server...

HPESBUX04166 rev.2 - HPE HP-UX System Management Homepage, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Authentication Bypass; Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX System Management Software A.3.2.21.03 or earlier HPE System Management Homepage A.3.2.21.03 or earlier CVSS Scores: | CV...

HPESBGN04151 rev.1 - HPE OneView for VMware vCenter, Remote Cross-Site Scripting

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView for VMware vCenter with Operations Manager and Log Insight - Prior to 10.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26584 |...

HPESBST04138 rev.1 - HPE 3Par and Primera StoreServ Management Console (SSMC) using sudo, Local Buffer Overflow

Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR StoreServ Management and Core Software Media SSMC prior to 3.8 are vulnerable CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-3156 |...

HPESBHF04149 rev.1 - HPE StoreOnce Systems using HPE Integrated Lights-Out 5 (iLO 5), Multiple Remote and Local vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreOnce 5650 - Prior to 4.3.0 HPE StoreOnce 5200 - Prior to 4.3.0 HPE StoreOnce 3640 - Prior to 4.3.0...

HPESBHF04144 rev.1 - HPE StoreOnce Systems using HPE Integrated Lights-Out 4 (iLO 4), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Buffer Overflow; Remote: Cross-Site Scripting XSS, Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreOnce 2700 8TB Backup - Prior to 3.18.20 HPE StoreOnce 2900 24TB Backup - Prior to 3.18.20 HPE...