HPESBNS03827 rev.1 - HPE Nonstop Systems using NonStop SSL T0910, Local Unqualified Configuration Change

Potential Security Impact: Local: Unqualified Configuration Change SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop SSL T0910 L-Series: All versions prior to T0910L02^ABB; H-series and J-Series: All versions prior to T0910H01^ABD CVSS Scores: | CVE | CVSS Vector | Base Scor...

HPESBHF03826 rev.1 - HPE Integrated Lights-Out 3 (iLO 3) Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 3 iLO 3 1.88 - Unauthenticated Remote Denial of Service CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8987 |...

HPESBHF03819 rev.2 - HPE XP Storage using HGLM, Local Authentication Bypass

Potential Security Impact: Local: Authentication Restriction Bypass; Remote: Authentication Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Hitachi Dynamic Link Manager HDLM Software HGLM 6.3.0-00 to 8.5.2-00 CVSS Scores: | CVE | CVSS Vector | Base Score | | ---...

HPESBHF03813 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC 7.3 E0506 - Reported on Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8981 |...

HPESBHF03812 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Multiple Vulnerabilities

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC tbs CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12617 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H...

HPESBHF03815 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC 7.3 E0504P2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5792 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |...

HPESBHF03809 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Authentication Restriction Bypass

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC TBD CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8982 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N | 6....

HPESBHF03811 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Multiple Vulnerabilities

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC version 7.3 E0506P03 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8984 |...

HPESBHF03808 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC Plat 7.3 E0504P4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8983 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A...

HPESBHF03814 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Unauthorized Modification

Potential Security Impact: Remote: Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC PLAT 7.3 E0506 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2004-2761 |...

HPESBHF03810 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8980 |...

HPESBHF03797 rev.2 - HPE Integrated Lights-Out 2 (iLO 2), Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 2 iLO 2 2.29 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8979 |...

HPESBMU03806 rev.2 - HPE IceWall Products, Multiple Remote Unauthorized Disclosure of Information, Unauthorized Modificiation

Potential Security Impact: Remote: Unauthorized Disclosure of Information, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dfw 10.0 Patch 8 HP-UX and RHEL, 10.0 Patch 10 HP-UX and RHEL and 11.0 RHEL IceWall MCRP 4.0 RHEL 7 IceWall MFA 4.0...

HPESBHF03805 rev.24 - Certain HPE products using Microprocessors from Intel, AMD, and ARM, with Speculative Execution, Elevation of Privilege and Information Disclosure (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754)

Potential Security Impact: Local: Disclosure of Information, Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL120 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLiant DL160 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLian...

HPESBHF03803 rev.2 - Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance, Remote Denial of Service and Execution of Code

Potential Security Impact: Remote: Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Provisioning Manager prior to and including v1.20 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8975 |...

HPESBNS03804 rev.1 - HPE NonStop Server, Local Authentication Restriction Bypass

Potential Security Impact: Local: Authentication Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop Servers L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL CVSS Scores: | CVE |...

HPESBHF03800 rev.1 - HPE Comware 7 MSR Routers, Remote Denial of Service and Local Elevation or Privilege

Potential Security Impact: Local: Elevation of Privilege; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products Earlier than R0605P20 release - MSR Routers Only CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBHF03801 rev.1 - HPE ProLiant m510 or m710x server cartridges with HP Trusted Platform Module, Local and Remote Unauthorized Access to Data

Potential Security Impact: Local: Unauthorized Access to Data; Remote: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Cartridge 5.51 HPE ProLiant m510 Server Cartridge 5.51 CVSS Scores: | CVE | CVSS Vector | Base Score | | ---...

HPESBHF03799 rev.1 - HPE VCX Products using NTP, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. VCX Products All versions prior to v9.8.19 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-9310 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L |...

HPESBHF03798 rev.1 - HPE Proliant Gen10 Servers, DL20 Gen9, ML30 Gen9 and Certain Apollo Servers Using Intel Server Platform Service (SPS) v4.0, Local Denial of Service and Execution of Arbitrary Code

Potential Security Impact: Local: Denial of Service DoS, Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 2000 System ROM firmware prior to v1.26 HPE Apollo 4510 System ROM firmware prior to v1.26 HPE Apollo 6000 DLC System ROM firmware prior ...

HPESBMU03794 rev.1 - HPE Insight Control, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Indirect Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Insight Control 7.6 LR1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8969 | CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N | 2.6 |...

HPESBMU03795 rev.1 - HPE Matrix Operating Environment, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Indirect Vulnerabilities, Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Matrix Operating Environment Software 7.6 LR1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-89...

HPESBHF03796 rev.1 - HPE RESTful Interface Tool (iLOREST), Local Execution of Arbitrary Code

Potential Security Impact: Local: Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP RESTful Interface Tool 1.5, 2.0 - hprest-1.5-79.x8664.rpm, ilorest-2.0-403.x8664.rpm CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8968...

HPESBHF03788 rev.1 - Hewlett Packard Enterprise Intelligent Management Center flexFileUpload Directory Traversal Remote Code Execution Vulnerability

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC PLAT 7.3 E0504P02 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8961 |...

HPESBHF03787 rev.1 - Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT, Deserialization of Untrusted Data, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8962 |...

HPESBHF03785 rev.1 - HPE B-Series SAN Network Advisor Software, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP B-series SAN Network Advisor Software 14.0.2 and prior CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-8204 |...

HPESBHF03779 rev.1 - HPE Fabric OS using OpenSSH, Denial of Service

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. StoreFabric B-series Switches FOS prior to 7.4.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-6515 |...

HPESBHF03784 rev.1 - HPE B-Series SAN Network Advisor Software Running WildFly (formerly JBoss Application Server), Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP B-series SAN Network Advisor Software 14.0.2 and prior running on a Windows OS CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-0793 |...

HPESBHF03792 rev.1 - HPE 501 Client Bridge, Aruba 501 Client Bridge, and HPE M111 Client Bridge - WPA2 Key Re-installation Vulnerabilities, Disclosure of information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP M111 Client Bridge v5.3.8 and earlier HP 501 Client Bridge v1.0.2 and earlier, v2.0.0 and earlier Aruba 501 Client Bridge v1.0.2 and earlier, v2.0.0 and earlier CVSS...

HPESBHF03789 rev.2 - Certain HPE Gen9 Systems with HP Trusted Platform Module v2.0 Option, Unauthorized Access to Data

Potential Security Impact: Local: Unauthorized Access to Data; Remote: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Trusted Platform Module 2.0 Kit FW 5.51 - TPM 2.0 FW 5.62 is not affected. This is the Gen9 TPM 2.0 option only Gen9 servers could...

HPESBST03780 rev.1 - HPE MSA 1040 and 2040 SAN Storage. Remote Escalation of Privilege, Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass, Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP MSA 2040 SAN Storage GL220P008 and earlier HP MSA 1040 SAN Storage GL220P008 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | -...

HPESBHF03782 rev.1 - HPE intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12554 |...

HPESBHF03776 rev.1 - HPE Intelligent Management Center (iMC) Service Operation Management (SOM), Remote Arbitrary File Download

Potential Security Impact: Remote: Arbitrary File Download, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC IMC SOM 7.3 E0501 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12555 |...

HPESBHF03786 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC IMC version 7.3 E0504P04 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8958 |...

HPESBHF03778 rev.1 - HPE intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12556 |...

HPESBHF03781 rev.1 - HPE intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P4 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12561 |...

HPESBHF03777 rev.2 - HPE Intelligent Management Center (iMC) PLAT, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC Plat 7.3 E0504P2 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12559 |...

HPESBMU03753 rev.4 - HPE System Management Homepage for Windows and Linux, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Elevation of Privilege, Execution of Arbitrary Code; Remote: Authentication Bypass, Cross-Site Scripting XSS, Denial of Service DoS, Disclosure of Sensitive Information, Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted...

HPESBNS03775 rev.1 - HPE NonStop Samba, Remote Disclosure of Information, Authentication Bypass, Unauthorized Elevation of Privilege

Potential Security Impact: Remote: Authentication Bypass, Disclosure of Information, Unauthorized Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop L-Series: T1201L01 through T1201L01^AAO; H and J-Series: T1201H01 through T1201H01^AAN CVSS...

HPESBUX03772 rev.1 - HP-UX BIND Service Running Named, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Read Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX DNS and BIND Software B.11.31 - BIND 9.9.4 prior to C.9.9.4.11.0 and BIND 9.11.1 prior to C.9.11.1.2.0 CVSS Scores: | CVE | CVSS Vector ...

HPESBGN03767 rev.1 - HPE Operations Orchestration, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Orchestration - All versions prior to 10.80 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8994 |...

HPESBHF03705 rev.4 - HPE Integrated Lights-Out 4, 3, 2 and Moonshot Remote Console Administrator (iLO 4 and MRCA) Remote Disclosure of Information

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Remote Console Administrator Prior to 2.50 HP Integrated Lights-Out 4 iLO 4, Prior to 2.53 HP Integrated Lights-Out 3 iLO 3, Firmware for ProLiant G7 Servers Prior...

HPESBHF03769 rev.4 - HPE Integrated Lights-out 4 (iLO 4), Moonshot, and NonStop Systems, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 4 iLO 4 Prior to 2.53 HPE ProLiant m510 Server Cartridge Prior to 2.56 HPE ProLiant m710x Server Blade Prior to 2.56 CLIM BIOS and iLO...

HPESBHF03770 rev.1 - HPE Comware 7 MSR Routers using PHP, Go, Apache Http Server, and Tomcat, Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products V7 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5385 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L | 5.6 | |...

HPESBHF03768 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC PLAT 7.3 E0504 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12487 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:...

HPESB3P03762 rev.1 - HPE C Switch Software using Cisco Prime Data Center Network Manager (DCNM), Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP C-series Switch Software Data Center Network Manager Version 10.11, 10.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-6639 |...

HPESBGN03765 rev.2 - HPE LoadRunner and HPE Performance Center, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Performance Center - All versions HP LoadRunner - All versions CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-2183 |...

HPESB3P03767 rev.1 - HPE Proliant ML10 Gen9 servers using Intel Xeon E3-1200M v5 and 6th Generation Intel Core Processors, Unauthorized Write to Filesystem

Potential Security Impact: Local: Unauthorized Write Access to the File System; Remote: Unauthorized Write Access to the File System SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant ML10 Gen9 E3-1225 v5 3.3GHz 4-core 8GB-R 1TB Non-hot Plug 4LFF SATA 300W AP Svr/Promo S...

HPESBGN03766 rev.2 - HPE Project and Portfolio Management (PPM), Remote Cross-Site Scripting

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Project and Portfolio Management Center - v9.30, v9.31, v9.32, v9.40 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8993 |...

HPESBHF03763 rev.1 - HPE Comware 7, IMC, VCX products using OpenSSL, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products See resolution section for impacted versions HP Intelligent Management Center iMC See resolution section for impacted versions VCX Products 9.8.19 CVSS...