CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

HP : Security Vulnerabilities

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2022-46359 Exec Code 2023-01-30 2023-02-07
0.0
None ??? ??? ??? ??? ??? ???
Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
2 CVE-2022-46358 Exec Code 2023-01-30 2023-02-07
0.0
None ??? ??? ??? ??? ??? ???
Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
3 CVE-2022-46357 Exec Code 2023-01-30 2023-02-07
0.0
None ??? ??? ??? ??? ??? ???
Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
4 CVE-2022-46356 Exec Code 2023-01-30 2023-02-07
0.0
None ??? ??? ??? ??? ??? ???
Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.
5 CVE-2022-38395 427 2022-12-12 2022-12-15
0.0
None ??? ??? ??? ??? ??? ???
HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.
6 CVE-2022-37935 522 2023-03-01 2023-03-10
0.0
None ??? ??? ??? ??? ??? ???
HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.
7 CVE-2022-37931 287 2022-11-22 2022-11-29
0.0
None ??? ??? ??? ??? ??? ???
A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details.
8 CVE-2022-28625 532 2022-08-31 2022-09-07
0.0
None ??? ??? ??? ??? ??? ???
A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability. To exploit this vulnerability, HPE OneView must be configured with credential access to external repositories. HPE has provided a software update to resolve this vulnerability in HPE OneView.
9 CVE-2022-23455 2023-02-01 2023-02-08
0.0
None ??? ??? ??? ??? ??? ???
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
10 CVE-2022-23454 2023-02-01 2023-02-08
0.0
None ??? ??? ??? ??? ??? ???
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
11 CVE-2022-23453 2023-02-01 2023-02-08
0.0
None ??? ??? ??? ??? ??? ???
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
12 CVE-2022-3990 2023-02-01 2023-02-08
0.0
None ??? ??? ??? ??? ??? ???
HPSFViewer might allow Escalation of Privilege. This potential vulnerability was remediated on July 29th, 2022. Customers who opted for automatic updates should have already received the remediation.
13 CVE-2021-3821 DoS 2022-12-12 2022-12-14
0.0
None ??? ??? ??? ??? ??? ???
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products.
Total number of vulnerabilities : 13   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.