Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
HpSimplivity 380 Gen9 Firmware

2 matches found

CVE
CVE•added 2020/01/03 5:23 p.m.•153 views

CVE-2019-11994

The CVE-2019-11994 issue affects HPE SimpliVity products (380 Gen 9/10, 380 Gen 10 G, 2600 Gen 10, OmniCube, OmniStack for Cisco/Lenovo/Dell). The root cause is an API that, during upgrade, does not properly prevent directory traversal, allowing unauthenticated remote execution of manifest files....

9.8CVSS9.9AI score0.07245EPSS
CVE
CVE•added 2020/01/03 5:18 p.m.•136 views

CVE-2019-11993

CVE-2019-11993 affects HPE SimpliVity 380 Gen 9/10, 380 Gen 10 G, 2600 Gen 10, OmniCube/OmniStack variants for Cisco/Lenovo/Dell. The root cause is two now-deprecated APIs that run with root privileges, accept a file name path, and can create or delete arbitrary files on the nodes. These APIs are...

9.4CVSS7.8AI score0.0153EPSS