# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
1 |
CVE-2019-5404 |
74 |
|
|
2019-08-09 |
2019-08-16 |
8.7 |
None |
Remote |
Low |
??? |
Complete |
Complete |
Partial |
A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. |
2 |
CVE-2017-8977 |
20 |
|
DoS |
2018-02-15 |
2018-03-09 |
8.5 |
None |
Remote |
Low |
Not required |
None |
Partial |
Complete |
A Remote Denial of Service vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found. |
3 |
CVE-2016-4383 |
284 |
|
|
2017-06-27 |
2017-07-06 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change. |
4 |
CVE-2016-2020 |
|
|
+Info |
2016-06-08 |
2016-08-24 |
8.5 |
None |
Remote |
Low |
??? |
Complete |
Complete |
None |
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030. |
5 |
CVE-2016-2014 |
284 |
|
DoS |
2016-05-07 |
2016-12-01 |
8.5 |
None |
Remote |
Low |
??? |
None |
Complete |
Complete |
HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors. |
6 |
CVE-2015-2120 |
|
|
+Priv |
2015-05-25 |
2016-12-31 |
8.7 |
None |
Remote |
Low |
??? |
Complete |
Partial |
Complete |
Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka ZDI-CAN-2567. |
7 |
CVE-2014-7879 |
287 |
|
Exec Code Bypass |
2014-12-10 |
2019-10-09 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors. |
8 |
CVE-2014-2625 |
22 |
|
Dir. Trav. |
2014-07-26 |
2017-01-07 |
8.5 |
None |
Remote |
Low |
Not required |
Complete |
Partial |
None |
Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to read arbitrary files via crafted input, aka ZDI-CAN-2023. |
9 |
CVE-2014-2622 |
|
|
+Info |
2014-07-16 |
2017-08-29 |
8.5 |
None |
Remote |
Low |
??? |
Complete |
Complete |
None |
Unspecified vulnerability in HP Intelligent Management Center (iMC) before 7.0 E02020P03 and Branch Intelligent Management System (BIMS) before 7.0 E0201P02 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors, aka ZDI-CAN-2312. |
10 |
CVE-2014-2607 |
|
|
Exec Code |
2014-05-26 |
2019-10-09 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
Unspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows remote authenticated users to execute arbitrary code by leveraging the OMi operator role. |
11 |
CVE-2013-6215 |
|
|
Exec Code |
2014-04-19 |
2019-10-09 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors, aka ZDI-CAN-1977. |
12 |
CVE-2012-2002 |
20 |
|
|
2012-05-02 |
2017-12-14 |
8.3 |
None |
Remote |
Medium |
Not required |
Complete |
Partial |
Partial |
Open redirect vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. |
13 |
CVE-2012-1999 |
|
|
+Info |
2013-03-11 |
2019-10-09 |
8.5 |
None |
Remote |
Low |
??? |
Complete |
Complete |
None |
Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors. |
14 |
CVE-2011-2401 |
|
|
|
2011-07-29 |
2017-08-29 |
8.3 |
None |
Remote |
Medium |
Not required |
Complete |
Partial |
Partial |
Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors. |
15 |
CVE-2011-1861 |
|
|
+Info |
2011-06-14 |
2017-08-17 |
8.3 |
None |
Remote |
Medium |
Not required |
Complete |
Partial |
Partial |
Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to modify data or obtain sensitive information via unknown vectors. |
16 |
CVE-2011-1857 |
|
|
Bypass |
2011-06-14 |
2017-08-17 |
8.2 |
None |
Remote |
Medium |
??? |
Partial |
Complete |
Complete |
Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote authenticated users to bypass intended access restrictions via unknown vectors. |
17 |
CVE-2011-1736 |
22 |
|
Dir. Trav. |
2011-05-07 |
2018-10-09 |
8.5 |
None |
Remote |
Low |
Not required |
Complete |
None |
Partial |
Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message. |
18 |
CVE-2010-4031 |
|
|
+Priv |
2010-11-02 |
2017-08-17 |
8.0 |
None |
Remote |
Low |
??? |
Partial |
Complete |
Partial |
Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via unknown vectors. |
19 |
CVE-2010-0450 |
|
|
+Priv |
2010-03-31 |
2019-10-09 |
8.5 |
None |
Remote |
Low |
??? |
Complete |
Complete |
None |
Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors. |
20 |
CVE-2009-2680 |
|
|
DoS |
2009-09-24 |
2017-08-17 |
8.5 |
None |
Remote |
Low |
Not required |
None |
Partial |
Complete |
Unspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders in HP StorageWorks 1/8 G2 Tape Autoloader firmware 2.30 and earlier, MSL2024 Tape Library firmware 4.20 and earlier, MSL4048 Tape Library firmware 6.50 and earlier, and MSL8096 Tape Library firmware 8.90 and earlier allows remote attackers to cause a denial of service via unknown vectors. |