HPESBHF03766 rev.1 - HPE ConvergedSystem 700 Solution with Comware v5 Switches using NTP, Remote Denial of Service (DoS), Unauthorized Modification and Local Denial of Service (DoS)

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 1.0 HP ConvergedSystem 700 for Virtualization 1.0 HP ConvergedSystem 700x 1.0 HP ConvergedSystem...

HPESBHF03765 rev.1 - HPE ConvergedSystem 700 Solution with Comware v7 Switches using OpenSSL, Remote Denial of Service (DoS) and Disclosure of Sensitive Information

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 for Virtualization 1.0 HP ConvergedSystem 700 for Virtualization 1.1 1.1 HP ConvergedSystem 700 Virtualization 2.0...

HPESBGN03764 rev.2 - HPE LoadRunner and Performance Center, Remote Cross-Site Scripting (XSS)

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE LoadRunner - v12.53 and earlier HPE Performance Center - v12.53 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8953 |...

HPESBHF03764 rev.3 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC PLAT 7.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8954 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | 10....

HPESBGN03763 rev.1 - HPE SiteScope, Disclosure of Sensitive Information, Bypass Security Restriction, Remote Arbitrary Code Execution

Potential Security Impact: Local: Bypass Security Restrictions, Disclosure of Sensitive Information; Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP SiteScope Monitors Software Series - v11.2x, v11.3x CVSS Scores: | CVE | CVSS Vector | Base Scor...

HPESBGN03762 rev.1 - HPE Network Node Manager i (NNMi) Software, Remote Bypass Security Restrictions, Cross-Site Scripting (XSS), URL Redirection

Potential Security Impact: Remote: Bypass Security Restrictions, Cross-Site Scripting XSS, URL Redirection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Network Node Manager I NNMi Software - v10.0x, v10.1x, v10.2x CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- ...

HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege

Potential Security Impact: Remote: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloud Optimizer - v1.10, v1.20, v2.0, v2.01, v2.10, v2.20/ CO – v3.0, v3.01 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...

HPESBHF03760 rev.1 - HPE Network Products including Comware 7 running NTP, Remote Unauthorized Data Injection

Potential Security Impact: Remote: Unauthorized Data Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products All versions - Please refer to the RESOLUTION below for a list of updated products. CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...

HPESBUX03759 rev.2 - HP-UX CIFS Sever using Samba, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Code Execution, Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Common Internet File System CIFS, Client/Server Software For HPE CIFS SERVER B.04.05.x release up-to version B.04.05.03.00 and all...

HPESBUX03747 rev.1 - HP-UX running BIND, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX DNS and BIND Software B.11.31 - BIND 9.9.4 prior to C.9.9.4.10.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-3135 |...

HPESBGN03758 rev.2 - HPE UCMDB, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP UCMDB Configuration Manager Software - v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8947 |...

HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products All versions - Please refer to the RESOLUTION below for a list of updated products. Comware v5 CW5 Products All versions - Please refer to the RESOLUTIO...

HPESBNS03755 rev.2 - HPE NonStop Server using Samba, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop L Series: T1201L01 through T1201L01^AAL, H and J Series: T1201H01 through T1201H01^AAM CVSS Scores: | CVE ...

HPESBHF03756 rev.1 - HPE Network Products including Comware 7, iMC, and VCX running OpenSSL, Remote Denial of Service (DoS), Disclosure of Sensitive Information

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. VCX Products All versions - Please refer to the RESOLUTION below for a list of updated products. Comware v7 CW7 Products All versions -...

HPESBGN03737 rev.1 - HPE IceWall Federation Agent, Remote Unauthorized Disclosure of Information, Unauthorized Modification

Potential Security Impact: Remote: Unauthorized Disclosure of Information, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall Federation Agent Version 3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8945 |...

HPESBHF03754 rev.1 - HPE ML10 Gen 9 Server using Intel Xeon E3-1200 v5 Processor, Remote Access Restriction Bypass

Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant ML10 Gen9 E3-1225 v5 3.3GHz 4-core 8GB-R 1TB Non-hot Plug 4LFF SATA 300W AP Svr/Promo Gen9 HPE ProLiant ML10 Gen9 E3-1225 v5 4GB-R 1TB Non-hot Plug 4LFF SATA...

HPESBGN03752 rev.1 - HPE IceWall using OpenSSL, remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dfw 10.0 HP-UX 11i v3 - using OpenSSL IceWall SSO certd 10.0 HP-UX 11i v3 - using OpenSSL IceWall MCRP 3.0 HP-UX 11i v3 - using OpenSSL CVSS Scores: | CVE | CVSS...

HPESBHF03750 rev.1 - HPE Network Products including Comware 5, Comware 7 and VCX running NTP, Remote Denial of Service (DoS), Unauthorized Modification, Local Denial of Service (DoS)

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v5 CW5 Products All versions - Please refer to the RESOLUTION below for a list of updated products. Comware v7...

HPESBGN03749 rev.1 - HPE Server Automation, using Apache Struts, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Server Automation Software Series - v9.1x, v10.0x, v10.1x, v10.2x, v10.5x CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5638 |...

HPESBHF03751 rev.1 - HPE Aruba AirWave Glass, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Airwave Software Glass v1.0.0 and 1.0.1 - Only AirWave Glass is affected; standard AirWave is not CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBHF03730 rev.2 - HPE Aruba ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Command Execution, Cross-Site Scripting XSS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Enterprise Software - All ClearPass 6.6.x version...

HPESBGN03748 rev.1 - HPE Cloud Optimizer, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloud Optimizer v3.0x CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8944 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5 |...

HPESBHF03744 rev.1 - HPE Intelligent Management Center (iMC) PLAT running OpenSSL, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC All versions prior to IMC PLAT 7.3 E0504P04 - Please refer to the RESOLUTION below for a list of impacted products. CVSS Scores: | CVE | CV...

HPESBHF03746 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC All versions prior to IMC PLAT 7.3 E0504P04 - Please refer to the RESOLUTION below for a list of impacted products. CVSS Scores: | CVE | CVSS Vect...

HPESBHF03745 rev.3 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC All versions prior to IMC PLAT 7.3 E0504P04 - Please refer to the RESOLUTION below for a list of impacted products. CVSS Scores: | CVE | CVSS Vect...

HPESBGN03742 rev.1 - HP Operations Analytics using Linux, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Operations Analytics Software - v2.2, v2.3, v2.31, v2.31 IP1, v2.31 IP2, v2.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...

HPESBHF03743 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC All versions prior to IMC PLAT 7.3 E0504P04 - Please refer to the RESOLUTION below for a list of impacted products. CVSS Scores: | CVE | CVSS...

HPESBGN03740 rev.1 - HPE Network Automation, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Authentication Bypass; Remote: Code Execution, Elevated Privileges, SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Network Automation Software 9.1x, 9.2x, 10.0x, 10.1x and 10.2x CVSS Scores: | CVE | CVSS Vector | Base Score | | -...

HPESBHF03736 rev.1 - HPE Aruba and HPE ProVision network switches using Diffie Hellman Group1 Sha1 Exchange Algorithm, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Provision Network Switches xx.16.01.0006, xx.15.18.0007, xx.15.16.0012m and previous versions HPE Aruba Network Switches xx.16.01.0006, xx.15.18.0007, xx.15.16.0012m an...

HPESBST03739 rev.1 - HPE StoreFabric B-series Switches, Remote Elevation of Privilege

Potential Security Impact: Remote: Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. StoreFabric B-series Switches - All versions prior to FOS v7.4.1d and v8.0.1b CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-8202 |...

HPESBHF03741 rev.1 - HPE Network products including Comware 7, IMC, and VCX running OpenSSL, Local Unauthorized Disclosure of Information, Remote Denial of Service (DoS), Unauthorized Disclosure of Information

Potential Security Impact: Local: Unauthorized Disclosure of Information; Remote: Denial of Service DoS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products Products All versions - Please refer to the RESOLUTION below for ...

HPESBGN03732 rev.1 - HPE Data Protector, Remote Arbitrary Code Execution, Disclosure of Information

Potential Security Impact: Local: Disclosure of Information; Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Data Protector Software prior to 8.17 and 9.09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5807 |...

HPESBNS03735 rev.1 - HPE NonStop Servers using SSH Service, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop Servers L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA - SSH Service CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...

HPESBHF03738 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC 7.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5804 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 | |...

HPESBHF03724 rev.1 - HPE ConvergedSystem 700 Solution with Comware v7 Switches, Remote Disclosure of Information

Potential Security Impact: Remote: Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 for Virtualization 1.0 HP ConvergedSystem 700 for Virtualization 1.1 1.1 HP ConvergedSystem 700 Virtualization 2.0 VMware Kit 2.0 HP...

HPESBGN03726 rev.1 - HPE Universal CMDB, Remote Arbitrary Code Execution, Bypass Security Restrictions, Denial of Service (DoS)

Potential Security Impact: Remote: Arbitrary Code Execution, Bypass Security Restrictions, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Universal CMDB Integration Managed Server Software - UCMDB Configuration Manager 10.10 / 10.11; UCMDB Configuration...

HPESBGN03734 rev.1 - HPE Vertica Analytics Platform, Remote Gain Privileged Access

Potential Security Impact: Remote: Gain Privileged Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Vertica Analytics Platform - v4.1 and later CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5802 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

HPESBGN03728 rev.1 - HPE Operations Agent using OpenSSL, Remote Denial of Service (DoS), Unauthorized Access to Data

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Agent - v11.15, v11.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-2107 |...

HPESBGN03727 rev.1 - HPE Business Process Monitor, Remote Unauthorized Access to Data

Potential Security Impact: Remote: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Business Process Monitor Ultimate Edition Software - v09.2x, v09.30 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5801 |...

HPESBGN03721 rev.1 - HPE Operations Bridge Analytics, Remote Cross-Site Scripting (XSS)

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Operations Analytics Software - Operations Bridge Analytics v3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5800 |...

HPESBGN03722 rev.2 - HPE Operations Agent Virtual Appliance, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Agent - v11.11, v11.12, v11.13, v11.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...

HPESBUX03725 rev.1 - HPE HP-UX Web Server Suite running Apache, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Read Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Apache-based Web Server B.11.31 - httpd prior to B.2.4.18.02 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBHF03723 rev.1 - HPE Aruba ClearPass Policy Manager, using Apache Struts, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager All versions prior to 6.6.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5638 |...

HPESBGN03686 rev.1 - HPE OpenCall Media Platform (OCMP), Remote Code Execution, Cross-Site Scripting (XSS)

Potential Security Impact: Remote: Code Execution, Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP OpenCall Media Platform OCMP - all versions prior to 3.4.2 RP201 for OCMP 3.x, all versions prior to 4.4.7 RP702 for OCMP 4.x CVSS Scores: | CVE | CVSS...

HPESBHF03719 rev.1 - HPE Intelligent Management Center (IMC), Remote Unauthenticated Disclosure of Information

Potential Security Impact: Remote: Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC Prior to IMC SOM V7.3 E0501 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5797 |...

HPESBNS03708 rev.1 - HPE NonStop Software Essentials, Local Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NS Software Essentials Server T0894 T0894H02 through T0894H02^AAI CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5788 |...

HPESBHF03711 rev.1 - HPE 2620 Series Network Switches, Remote Cross Site Request Forgery (CSRF)

Potential Security Impact: Local: Cross-Site Request Forgery CSRF; Remote: Cross-Site Request Forgery CSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP MSR2000 Router Series RA.15.05.0006 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5796 |...

HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Denial of Service DoS, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX 11i v3 HPUX-NTP B.11.31 - NTP 4.2.8 prior to C.4.2.8.2.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | ---...

HPESBGN03707 rev.1 - HPE ConvergedSystem 700 2.0 VMware Kit, Remote Increase of Privilege

Potential Security Impact: Remote: Increase of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 1.0 or 1.1 - Customers running the HPE ConvergedSystem 700 Firmware and Software Compatibility Matrix -June 2016 HP ConvergedSystem 700 Virtualization 2....

HPESBHF03714 rev.1 - HPE Intelligent Management Center (IMC) PLAT, Local Arbitrary File Download

Potential Security Impact: Local: Arbitrary File Download SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC iMC PLAT 7.2 E0403P06 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5795 |...