HPESBHF03705 rev.4 - HPE Integrated Lights-Out 4, 3, 2 and Moonshot Remote Console Administrator (iLO 4 and MRCA) Remote Disclosure of Information

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Remote Console Administrator Prior to 2.50 HP Integrated Lights-Out 4 iLO 4, Prior to 2.53 HP Integrated Lights-Out 3 iLO 3, Firmware for ProLiant G7 Servers Prior...

HPESBHF03769 rev.4 - HPE Integrated Lights-out 4 (iLO 4), Moonshot, and NonStop Systems, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 4 iLO 4 Prior to 2.53 HPE ProLiant m510 Server Cartridge Prior to 2.56 HPE ProLiant m710x Server Blade Prior to 2.56 CLIM BIOS and iLO...

HPESBHF03770 rev.1 - HPE Comware 7 MSR Routers using PHP, Go, Apache Http Server, and Tomcat, Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products V7 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5385 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L | 5.6 | |...

HPESBHF03768 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC PLAT 7.3 E0504 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-12487 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:...

HPESB3P03762 rev.1 - HPE C Switch Software using Cisco Prime Data Center Network Manager (DCNM), Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP C-series Switch Software Data Center Network Manager Version 10.11, 10.12 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-6639 |...

HPESBGN03765 rev.2 - HPE LoadRunner and HPE Performance Center, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Performance Center - All versions HP LoadRunner - All versions CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-2183 |...

HPESB3P03767 rev.1 - HPE Proliant ML10 Gen9 servers using Intel Xeon E3-1200M v5 and 6th Generation Intel Core Processors, Unauthorized Write to Filesystem

Potential Security Impact: Local: Unauthorized Write Access to the File System; Remote: Unauthorized Write Access to the File System SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant ML10 Gen9 E3-1225 v5 3.3GHz 4-core 8GB-R 1TB Non-hot Plug 4LFF SATA 300W AP Svr/Promo S...

HPESBGN03766 rev.2 - HPE Project and Portfolio Management (PPM), Remote Cross-Site Scripting

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Project and Portfolio Management Center - v9.30, v9.31, v9.32, v9.40 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8993 |...

HPESBHF03763 rev.1 - HPE Comware 7, IMC, VCX products using OpenSSL, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products See resolution section for impacted versions HP Intelligent Management Center iMC See resolution section for impacted versions VCX Products 9.8.19 CVSS...

HPESBHF03766 rev.1 - HPE ConvergedSystem 700 Solution with Comware v5 Switches using NTP, Remote Denial of Service (DoS), Unauthorized Modification and Local Denial of Service (DoS)

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 1.0 HP ConvergedSystem 700 for Virtualization 1.0 HP ConvergedSystem 700x 1.0 HP ConvergedSystem...

HPESBHF03765 rev.1 - HPE ConvergedSystem 700 Solution with Comware v7 Switches using OpenSSL, Remote Denial of Service (DoS) and Disclosure of Sensitive Information

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 for Virtualization 1.0 HP ConvergedSystem 700 for Virtualization 1.1 1.1 HP ConvergedSystem 700 Virtualization 2.0...

HPESBGN03764 rev.2 - HPE LoadRunner and Performance Center, Remote Cross-Site Scripting (XSS)

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE LoadRunner - v12.53 and earlier HPE Performance Center - v12.53 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8953 |...

HPESBHF03764 rev.3 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC PLAT 7.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8954 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | 10....

HPESBGN03763 rev.1 - HPE SiteScope, Disclosure of Sensitive Information, Bypass Security Restriction, Remote Arbitrary Code Execution

Potential Security Impact: Local: Bypass Security Restrictions, Disclosure of Sensitive Information; Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP SiteScope Monitors Software Series - v11.2x, v11.3x CVSS Scores: | CVE | CVSS Vector | Base Scor...

HPESBGN03762 rev.1 - HPE Network Node Manager i (NNMi) Software, Remote Bypass Security Restrictions, Cross-Site Scripting (XSS), URL Redirection

Potential Security Impact: Remote: Bypass Security Restrictions, Cross-Site Scripting XSS, URL Redirection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Network Node Manager I NNMi Software - v10.0x, v10.1x, v10.2x CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- ...

HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege

Potential Security Impact: Remote: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloud Optimizer - v1.10, v1.20, v2.0, v2.01, v2.10, v2.20/ CO – v3.0, v3.01 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...

HPESBHF03760 rev.1 - HPE Network Products including Comware 7 running NTP, Remote Unauthorized Data Injection

Potential Security Impact: Remote: Unauthorized Data Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products All versions - Please refer to the RESOLUTION below for a list of updated products. CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...

HPESBUX03759 rev.2 - HP-UX CIFS Sever using Samba, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Code Execution, Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Common Internet File System CIFS, Client/Server Software For HPE CIFS SERVER B.04.05.x release up-to version B.04.05.03.00 and all...

HPESBUX03747 rev.1 - HP-UX running BIND, Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX DNS and BIND Software B.11.31 - BIND 9.9.4 prior to C.9.9.4.10.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-3135 |...

HPESBHF03757 rev.1 - HPE Network Products including Comware 5 and Comware 7 running NTP, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products All versions - Please refer to the RESOLUTION below for a list of updated products. Comware v5 CW5 Products All versions - Please refer to the RESOLUTIO...

HPESBGN03758 rev.2 - HPE UCMDB, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP UCMDB Configuration Manager Software - v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8947 |...

HPESBNS03755 rev.2 - HPE NonStop Server using Samba, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop L Series: T1201L01 through T1201L01^AAL, H and J Series: T1201H01 through T1201H01^AAM CVSS Scores: | CVE ...

HPESBHF03756 rev.1 - HPE Network Products including Comware 7, iMC, and VCX running OpenSSL, Remote Denial of Service (DoS), Disclosure of Sensitive Information

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. VCX Products All versions - Please refer to the RESOLUTION below for a list of updated products. Comware v7 CW7 Products All versions -...

HPESBGN03737 rev.1 - HPE IceWall Federation Agent, Remote Unauthorized Disclosure of Information, Unauthorized Modification

Potential Security Impact: Remote: Unauthorized Disclosure of Information, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall Federation Agent Version 3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8945 |...

HPESBGN03752 rev.1 - HPE IceWall using OpenSSL, remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dfw 10.0 HP-UX 11i v3 - using OpenSSL IceWall SSO certd 10.0 HP-UX 11i v3 - using OpenSSL IceWall MCRP 3.0 HP-UX 11i v3 - using OpenSSL CVSS Scores: | CVE | CVSS...

HPESBHF03754 rev.1 - HPE ML10 Gen 9 Server using Intel Xeon E3-1200 v5 Processor, Remote Access Restriction Bypass

Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant ML10 Gen9 E3-1225 v5 3.3GHz 4-core 8GB-R 1TB Non-hot Plug 4LFF SATA 300W AP Svr/Promo Gen9 HPE ProLiant ML10 Gen9 E3-1225 v5 4GB-R 1TB Non-hot Plug 4LFF SATA...

HPESBHF03750 rev.1 - HPE Network Products including Comware 5, Comware 7 and VCX running NTP, Remote Denial of Service (DoS), Unauthorized Modification, Local Denial of Service (DoS)

Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v5 CW5 Products All versions - Please refer to the RESOLUTION below for a list of updated products. Comware v7...

HPESBGN03749 rev.1 - HPE Server Automation, using Apache Struts, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Server Automation Software Series - v9.1x, v10.0x, v10.1x, v10.2x, v10.5x CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5638 |...

HPESBHF03751 rev.1 - HPE Aruba AirWave Glass, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Airwave Software Glass v1.0.0 and 1.0.1 - Only AirWave Glass is affected; standard AirWave is not CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

HPESBHF03730 rev.2 - HPE Aruba ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Command Execution, Cross-Site Scripting XSS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Enterprise Software - All ClearPass 6.6.x version...

HPESBGN03748 rev.1 - HPE Cloud Optimizer, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cloud Optimizer v3.0x CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8944 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5 |...

HPESBHF03745 rev.3 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC All versions prior to IMC PLAT 7.3 E0504P04 - Please refer to the RESOLUTION below for a list of impacted products. CVSS Scores: | CVE | CVSS Vect...

HPESBHF03744 rev.1 - HPE Intelligent Management Center (iMC) PLAT running OpenSSL, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC All versions prior to IMC PLAT 7.3 E0504P04 - Please refer to the RESOLUTION below for a list of impacted products. CVSS Scores: | CVE | CV...

HPESBHF03746 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC All versions prior to IMC PLAT 7.3 E0504P04 - Please refer to the RESOLUTION below for a list of impacted products. CVSS Scores: | CVE | CVSS Vect...

HPESBGN03742 rev.1 - HP Operations Analytics using Linux, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Operations Analytics Software - v2.2, v2.3, v2.31, v2.31 IP1, v2.31 IP2, v2.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...

HPESBHF03743 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC All versions prior to IMC PLAT 7.3 E0504P04 - Please refer to the RESOLUTION below for a list of impacted products. CVSS Scores: | CVE | CVSS...

HPESBHF03736 rev.1 - HPE Aruba and HPE ProVision network switches using Diffie Hellman Group1 Sha1 Exchange Algorithm, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Provision Network Switches xx.16.01.0006, xx.15.18.0007, xx.15.16.0012m and previous versions HPE Aruba Network Switches xx.16.01.0006, xx.15.18.0007, xx.15.16.0012m an...

HPESBGN03740 rev.1 - HPE Network Automation, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Authentication Bypass; Remote: Code Execution, Elevated Privileges, SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Network Automation Software 9.1x, 9.2x, 10.0x, 10.1x and 10.2x CVSS Scores: | CVE | CVSS Vector | Base Score | | -...

HPESBST03739 rev.1 - HPE StoreFabric B-series Switches, Remote Elevation of Privilege

Potential Security Impact: Remote: Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. StoreFabric B-series Switches - All versions prior to FOS v7.4.1d and v8.0.1b CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-8202 |...

HPESBHF03741 rev.1 - HPE Network products including Comware 7, IMC, and VCX running OpenSSL, Local Unauthorized Disclosure of Information, Remote Denial of Service (DoS), Unauthorized Disclosure of Information

Potential Security Impact: Local: Unauthorized Disclosure of Information; Remote: Denial of Service DoS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Comware v7 CW7 Products Products All versions - Please refer to the RESOLUTION below for ...

HPESBGN03732 rev.1 - HPE Data Protector, Remote Arbitrary Code Execution, Disclosure of Information

Potential Security Impact: Local: Disclosure of Information; Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Data Protector Software prior to 8.17 and 9.09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5807 |...

HPESBNS03735 rev.1 - HPE NonStop Servers using SSH Service, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NonStop Servers L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA - SSH Service CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...

HPESBHF03738 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC 7.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5804 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 | |...

HPESBHF03724 rev.1 - HPE ConvergedSystem 700 Solution with Comware v7 Switches, Remote Disclosure of Information

Potential Security Impact: Remote: Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP ConvergedSystem 700 for Virtualization 1.0 HP ConvergedSystem 700 for Virtualization 1.1 1.1 HP ConvergedSystem 700 Virtualization 2.0 VMware Kit 2.0 HP...

HPESBGN03726 rev.1 - HPE Universal CMDB, Remote Arbitrary Code Execution, Bypass Security Restrictions, Denial of Service (DoS)

Potential Security Impact: Remote: Arbitrary Code Execution, Bypass Security Restrictions, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Universal CMDB Integration Managed Server Software - UCMDB Configuration Manager 10.10 / 10.11; UCMDB Configuration...

HPESBGN03734 rev.1 - HPE Vertica Analytics Platform, Remote Gain Privileged Access

Potential Security Impact: Remote: Gain Privileged Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Vertica Analytics Platform - v4.1 and later CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5802 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

HPESBGN03728 rev.1 - HPE Operations Agent using OpenSSL, Remote Denial of Service (DoS), Unauthorized Access to Data

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Agent - v11.15, v11.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-2107 |...

HPESBGN03727 rev.1 - HPE Business Process Monitor, Remote Unauthorized Access to Data

Potential Security Impact: Remote: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Business Process Monitor Ultimate Edition Software - v09.2x, v09.30 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5801 |...

HPESBGN03721 rev.1 - HPE Operations Bridge Analytics, Remote Cross-Site Scripting (XSS)

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Operations Analytics Software - Operations Bridge Analytics v3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5800 |...

HPESBGN03722 rev.2 - HPE Operations Agent Virtual Appliance, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Agent - v11.11, v11.12, v11.13, v11.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-5195 |...