Vulnerability in Hewlett Packard Enterprise (HPE) HPE Superdome Flex Servers; 280 Servers
CVE-2022-37939
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to allow disclosure of information. HPE has made the following software to resolve the vulnerability in HPE Superdome Flex Servers v3.65.8 and Superdome Flex 280 Servers v1.45.8.
EPSS: 0.002 (8.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Hewlett Packard Enterprise (Hpe) Hpe Superdome Flex Servers; 280 Servers — versions Prior to Superdome Flex 3.65.8; Prior to Superdome Flex 280 1.45.8
- Hpe Superdome_flex_280_server
- Hpe Superdome_flex_280_server_firmware
- Hpe Superdome_flex_server
- Hpe Superdome_flex_server_firmware
References
- security-alert@hpe.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2022-37939?
- CVE-2022-37939 is a low-severity vulnerability in Hewlett Packard Enterprise (HPE) HPE Superdome Flex Servers; 280 Servers. CVSS score: 2.3/10. Published 2023-03-10.
- How severe is CVE-2022-37939?
- Low severity. CVSS v3 base score is 2.3 out of 10.