CVE-2024-22442

CVE-2024-22442 affects HPE 3PAR Service Processor. The public records describe an unauthenticated remote path that could bypass authentication, with a high impact (C/H/I/A = High). The CVSS 3.1 vectors consistently indicate Network access, no privileges required, and user interaction not needed. ...

CVE-2019-11991

CVE-2019-11991 concerns a remote information-disclosure vulnerability in HPE 3PAR Service Processor (SP) versions 4.1 through 4.4. The flaw affects the SP itself and any managed 3PAR arrays, potentially compromising confidentiality, integrity, and availability. The supplied connected documents co...

CVE-2019-5399

The CVE-2019-5399 entry describes a remote gain of authorized access vulnerability in HPE 3PAR Service Processor, affected on versions prior to 5.0.5.1. Connected documents corroborate that the issue concerns HPE 3PAR SP and cites an over-the-horizon access flaw enabling an attacker with network ...

CVE-2019-5397

CVE-2019-5397 affects HPE 3PAR Service Processor prior to 5.0.5.1. The vulnerability is a remote bypass of security restrictions (no user interaction required) that could allow an attacker to compromise confidentiality, integrity, and availability. CVSSv3 base score is 9.4 (CRITICAL) with network...

CVE-2019-5400

The CVE-2019-5400 entry describes a remote session reuse/authorization issue in HPE 3PAR Service Processor prior to version 5.0.5.1. Connected sources consistently identify the affected product as HPE 3PAR Service Processor and indicate the root cause is an authorization/session handling flaw tha...

CVE-2019-5398

CVE-2019-5398 describes a remote cross-site scripting vulnerability in HPE 3PAR Service Processor (SP). Affected product: HPE 3PAR Service Processor versions prior to 5.0.5.1. Vulnerable component: SP web interface exposing XSS risk (exact internal vector not specified in the provided documents)....

CVE-2019-5395

HPE 3PAR Service Processor (SP) is vulnerable to a remote arbitrary file upload in versions prior to 5.0.5.1. Connected sources corroborate this CVE and indicate a high-impact outcome (C/H, I/H, A/H) over a network with low complexity, but the documents do not provide exploitation details or a st...

CVE-2019-5396

CVE-2019-5396 affects HPE 3PAR Service Processor; prior to version 5.0.5.1, there is a remote authentication bypass vulnerability in the SP management interface. The issue allows an attacker with network access and no privileges to bypass authentication, potentially compromising confidentiality (...