Oneview Security Vulnerabilities - CVSS Score 5 - 6

CVE-2022-23700

A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.

CVE-2022-28625

A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability....

CVE-2023-28084

HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens

CVE-2023-28086

An HPE OneView appliance dump may expose proxy credential settings

CVE-2023-28087

An HPE OneView appliance dump may expose OneView user accounts

CVE-2023-28090

An HPE OneView appliance dump may expose SNMPv3 read credentials

CVE-2023-28091

HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump

CVE-2023-6573

HPE OneView may have a missing passphrase during restore.