CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   

HP : Security Vulnerabilities

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2022-46359 Exec Code 2023-01-30 2023-02-07
0.0
 None ??? ??? ??? ??? ??? ???
Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
2 CVE-2022-46358 Exec Code 2023-01-30 2023-02-07
0.0
 None ??? ??? ??? ??? ??? ???
Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
3 CVE-2022-46357 Exec Code 2023-01-30 2023-02-07
0.0
 None ??? ??? ??? ??? ??? ???
Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
4 CVE-2022-46356 Exec Code 2023-01-30 2023-02-07
0.0
 None ??? ??? ??? ??? ??? ???
Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
5 CVE-2022-38395 427 2022-12-12 2022-12-15
0.0
 None ??? ??? ??? ??? ??? ???
HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.
6 CVE-2022-37935 522 2023-03-01 2023-03-10
0.0
 None ??? ??? ??? ??? ??? ???
HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.
7 CVE-2022-37931 287 2022-11-22 2022-11-29
0.0
 None ??? ??? ??? ??? ??? ???
A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details.
8 CVE-2022-28625 532 2022-08-31 2022-09-07
0.0
 None ??? ??? ??? ??? ??? ???
A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability. To exploit this vulnerability, HPE OneView must be configured with credential access to external repositories. HPE has provided a software update to resolve this vulnerability in HPE OneView.
9 CVE-2022-28617 287 Bypass 2022-05-17 2022-05-25
7.5
 None Remote Low Not required Partial Partial Partial
A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
10 CVE-2022-28616 918 2022-05-17 2022-05-26
7.5
 None Remote Low Not required Partial Partial Partial
A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
11 CVE-2022-27239 787 Overflow +Priv 2022-04-27 2022-10-05
7.2
 None Local Low Not required Complete Complete Complete
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
12 CVE-2022-23934 DoS Exec Code 2022-03-11 2022-03-21
7.2
 None Local Low Not required Complete Complete Complete
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
13 CVE-2022-23933 DoS Exec Code 2022-03-11 2022-03-21
7.2
 None Local Low Not required Complete Complete Complete
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
14 CVE-2022-23932 DoS Exec Code 2022-03-11 2022-03-21
7.2
 None Local Low Not required Complete Complete Complete
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
15 CVE-2022-23931 DoS Exec Code 2022-03-11 2022-03-21
7.2
 None Local Low Not required Complete Complete Complete
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
16 CVE-2022-23930 DoS Exec Code 2022-03-11 2022-03-21
7.2
 None Local Low Not required Complete Complete Complete
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
17 CVE-2022-23929 DoS Exec Code 2022-03-11 2022-03-21
7.2
 None Local Low Not required Complete Complete Complete
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
18 CVE-2022-23928 DoS Exec Code 2022-03-11 2022-03-21
7.2
 None Local Low Not required Complete Complete Complete
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
19 CVE-2022-23927 DoS Exec Code 2022-03-11 2022-03-21
7.2
 None Local Low Not required Complete Complete Complete
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
20 CVE-2022-23926 DoS Exec Code 2022-03-11 2022-03-21
7.2
 None Local Low Not required Complete Complete Complete
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
21 CVE-2022-23925 DoS Exec Code 2022-03-11 2022-03-21
7.2
 None Local Low Not required Complete Complete Complete
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
22 CVE-2022-23924 DoS Exec Code 2022-03-11 2022-03-21
7.2
 None Local Low Not required Complete Complete Complete
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
23 CVE-2022-23706 79 XSS 2022-05-17 2022-05-25
4.3
 None Remote Medium Not required None Partial None
A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
24 CVE-2022-23700 863 2022-04-04 2022-04-13
2.1
 None Local Low Not required Partial None None
A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
25 CVE-2022-23699 287 Bypass 2022-04-04 2022-04-13
4.6
 None Local Low Not required Partial Partial Partial
A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
26 CVE-2022-23698 2022-04-04 2022-04-13
5.0
 None Remote Low Not required Partial None None
A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
27 CVE-2022-23697 79 XSS 2022-04-04 2022-04-12
4.3
 None Remote Medium Not required None Partial None
A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
28 CVE-2022-23456 2022-01-28 2022-02-03
2.1
 None Local Low Not required None Partial None
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software.
29 CVE-2022-23455 2023-02-01 2023-02-08
0.0
 None ??? ??? ??? ??? ??? ???
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
30 CVE-2022-23454 2023-02-01 2023-02-08
0.0
 None ??? ??? ??? ??? ??? ???
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
31 CVE-2022-23453 2023-02-01 2023-02-08
0.0
 None ??? ??? ??? ??? ??? ???
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
32 CVE-2022-3990 2023-02-01 2023-02-08
0.0
 None ??? ??? ??? ??? ??? ???
HPSFViewer might allow Escalation of Privilege. This potential vulnerability was remediated on July 29th, 2022. Customers who opted for automatic updates should have already received the remediation.
33 CVE-2021-39238 120 Overflow 2021-11-03 2021-11-04
7.5
 None Remote Low Not required Partial Partial Partial
Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow.
34 CVE-2021-39237 2021-11-03 2021-11-04
2.1
 None Local Low Not required Partial None None
Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential information disclosure.
35 CVE-2021-29220 120 Exec Code Overflow 2022-02-24 2022-03-07
9.0
 None Remote Low ??? Complete Complete Complete
Multiple buffer overflow security vulnerabilities have been identified in HPE iLO Amplifier Pack version(s): Prior to 2.12. These vulnerabilities could be exploited by a highly privileged user to remotely execute code that could lead to a loss of confidentiality, integrity, and availability. HPE has provided a software update to resolve this vulnerability in HPE iLO Amplifier Pack.
36 CVE-2021-29214 2021-12-10 2022-07-12
6.5
 None Remote Low ??? Partial Partial Partial
A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to inject code and elevate their privilege in SSMC. The scope of this vulnerability is limited to SSMC. Note: The arrays being managed are not impacted by this vulnerability. This vulnerability impacts SSMC versions 3.4 GA to 3.8.1.
37 CVE-2021-29212 22 Dir. Trav. 2021-11-01 2021-12-03
10.0
 None Remote Low Not required Complete Complete Complete
A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to confidentiality, integrity, and availability of the iLO Amplifier Pack appliance.
38 CVE-2021-29203 306 DoS Exec Code +Priv Bypass 2021-05-06 2022-07-12
10.0
 None Remote Low Not required Complete Complete Complete
A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged access, causing denial of service, and changing the configuration. HPE has released a software update to resolve the vulnerability in the HPE Edgeline Infrastructure Manager.
39 CVE-2021-26586 2021-08-05 2021-08-13
5.0
 None Remote Low Not required Partial None None
A potential security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to disclose sensitive information. HPE has made software updates available to resolve the vulnerability in the HPE Edgeline Infrastructure Manager (EIM).
40 CVE-2021-26584 79 XSS 2021-06-03 2021-06-11
4.3
 None Remote Medium Not required None Partial None
A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerability in HPE OneView for VMware vCenter (OV4VC).
41 CVE-2021-26583 Exec Code 2021-05-10 2021-05-21
7.5
 None Remote Low Not required Partial Partial Partial
A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution.
42 CVE-2021-25140 22 DoS Exec Code Dir. Trav. 2021-02-09 2021-02-16
10.0
 None Remote Low Not required Complete Complete Complete
A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This vulnerability could be remotely exploited by an unauthenticated user to cause a directory traversal in user supplied input to the `khuploadfile.cgi` CGI ELF. The directory traversal could lead to Remote Code Execution, Denial of Service, and/or compromise system integrity. **Note:** HPE recommends that customers discontinue the use of the HPE Moonshot Provisioning Manager. The HPE Moonshot Provisioning Manager application is discontinued, no longer supported, is not available to download from the HPE Support Center, and no patch is available.
43 CVE-2021-25139 787 DoS Exec Code Overflow 2021-02-09 2021-02-16
10.0
 None Remote Low Not required Complete Complete Complete
A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This vulnerability could be remotely exploited by an unauthenticated user to cause a stack based buffer overflow using user supplied input to the `khuploadfile.cgi` CGI ELF. The stack based buffer overflow could lead to Remote Code Execution, Denial of Service, and/or compromise system integrity. **Note:** HPE recommends that customers discontinue the use of the HPE Moonshot Provisioning Manager. The HPE Moonshot Provisioning Manager application is discontinued, no longer supported, is not available to download from the HPE Support Center, and no patch is available.
44 CVE-2021-3821 DoS 2022-12-12 2022-12-14
0.0
 None ??? ??? ??? ??? ??? ???
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products.
45 CVE-2021-3662 79 XSS 2021-10-29 2021-11-04
3.5
 None Remote Medium ??? None Partial None
Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).
46 CVE-2021-3440 2021-11-01 2022-07-12
4.6
 None Local Low Not required Partial Partial Partial
HP Print and Scan Doctor, an application within the HP Smart App for Windows, is potentially vulnerable to local elevation of privilege.
47 CVE-2021-3438 120 Overflow 2021-05-20 2021-06-08
4.6
 None Local Low Not required Partial Partial Partial
A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.
48 CVE-2020-24652 917 Exec Code 2020-10-19 2020-10-21
10.0
 None Remote Low Not required Complete Complete Complete
A addvsiinterfaceinfo expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
49 CVE-2020-24651 917 Exec Code 2020-10-19 2020-10-21
10.0
 None Remote Low Not required Complete Complete Complete
A syslogtempletselectwin expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
50 CVE-2020-24650 917 Exec Code 2020-10-19 2020-10-21
10.0
 None Remote Low Not required Complete Complete Complete
A legend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).
Total number of vulnerabilities : 1840   Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.