Hp
Page 4 of 19 — Hp CVEs from a corpus of 1807, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23704 | High | 7.5 | 2022-05-09 | A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The vulnerability could allow remote Denial of Service. The vulnerab… |
CVE-2022-27239 | High | 7.8 | 2022-04-27 | In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root priv… |
CVE-2022-23700 | Medium | 5.5 | 2022-04-04 | A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve t… |
CVE-2022-23699 | High | 7.8 | 2022-04-04 | A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve t… |
CVE-2022-23698 | High | 7.5 | 2022-04-04 | A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to… |
CVE-2022-23697 | Medium | 6.1 | 2022-04-04 | A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vu… |
CVE-2022-24293 | Critical | 9.8 | 2022-03-23 | Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. |
CVE-2022-24292 | Critical | 9.8 | 2022-03-23 | Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. |
CVE-2022-24291 | High | 7.5 | 2022-03-23 | Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. |
CVE-2022-23934 | High | 8.2 | 2022-03-11 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution… |
CVE-2022-23933 | High | 8.2 | 2022-03-11 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution… |
CVE-2022-23932 | High | 8.2 | 2022-03-11 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution… |
CVE-2022-23931 | High | 8.2 | 2022-03-11 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution… |
CVE-2022-23930 | High | 8.2 | 2022-03-11 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution… |
CVE-2022-23929 | High | 8.2 | 2022-03-11 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution… |
CVE-2022-23928 | High | 8.2 | 2022-03-11 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution… |
CVE-2022-23927 | High | 8.2 | 2022-03-11 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution… |
CVE-2022-23926 | High | 8.2 | 2022-03-11 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution… |
CVE-2022-23925 | High | 8.2 | 2022-03-11 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution… |
CVE-2022-23924 | High | 8.2 | 2022-03-11 | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution… |
CVE-2022-23958 | Medium | 5.5 | 2022-03-02 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
CVE-2022-23957 | Medium | 5.5 | 2022-03-02 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
CVE-2022-23955 | Medium | 5.5 | 2022-03-02 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
CVE-2022-23954 | Medium | 5.5 | 2022-03-02 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
CVE-2022-23956 | Medium | 5.5 | 2022-03-02 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
CVE-2022-23953 | Medium | 5.5 | 2022-03-02 | Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service. |
CVE-2021-29220 | High | 7.2 | 2022-02-24 | Multiple buffer overflow security vulnerabilities have been identified in HPE iLO Amplifier Pack version(s): Prior to 2.12. These vulnerabilities could be expl… |
CVE-2021-39301 | High | 8.8 | 2022-02-16 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code executio… |
CVE-2021-39300 | High | 8.8 | 2022-02-16 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code executio… |
CVE-2021-39299 | High | 8.8 | 2022-02-16 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code executio… |
CVE-2021-39298 | High | 8.8 | 2022-02-16 | A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbit… |
CVE-2021-39297 | High | 8.8 | 2022-02-16 | Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code executio… |
CVE-2020-6922 | High | 7.8 | 2022-02-16 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assist… |
CVE-2020-6921 | High | 7.8 | 2022-02-16 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assist… |
CVE-2020-6920 | Medium | 5.5 | 2022-02-16 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assist… |
CVE-2020-6919 | High | 7.8 | 2022-02-16 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assist… |
CVE-2020-6918 | High | 7.8 | 2022-02-16 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assist… |
CVE-2020-6917 | High | 7.8 | 2022-02-16 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assist… |
CVE-2022-23456 | Medium | 5.5 | 2022-01-28 | Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software. |
CVE-2022-22310 | Medium | 6.5 | 2022-01-19 | IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A remote attacker could exploit this weakness… |
CVE-2021-3965 | High | 7.5 | 2022-01-14 | Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews. |
CVE-2021-39048 | Medium | 5.5 | 2021-12-13 | IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker could exploit this… |
CVE-2021-29214 | High | 7.2 | 2021-12-10 | A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to… |
CVE-2021-39002 | High | 7.5 | 2021-12-09 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could… |
CVE-2021-38951 | High | 7.5 | 2021-12-09 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker… |
CVE-2021-38931 | Medium | 6.5 | 2021-12-09 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user hav… |
CVE-2021-38926 | Medium | 5.5 | 2021-12-09 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing m… |
CVE-2021-29678 | High | 8.7 | 2021-12-09 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other datab… |
CVE-2021-20373 | High | 7.5 | 2021-12-09 | IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD util… |
CVE-2021-38949 | Medium | 5.5 | 2021-11-16 | IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403. |
CVE-2020-28419 | High | 8.8 | 2021-11-09 | During installation with certain driver software or application packages an arbitrary code execution could occur. |
CVE-2019-18914 | Medium | 6.1 | 2021-11-09 | A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s br… |
CVE-2019-18912 | High | 7.8 | 2021-11-09 | A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with FutureSmart Firmware bu… |
CVE-2019-16240 | Critical | 9.1 | 2021-11-09 | A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro P… |
CVE-2019-18916 | High | 7.8 | 2021-11-09 | A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Printers) which may lead to unauthorized elev… |
CVE-2020-6931 | High | 7.8 | 2021-11-03 | HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege. |
CVE-2020-28416 | High | 7.8 | 2021-11-03 | HP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition) software available with HP PageWide and OfficeJet printer soft… |
CVE-2021-39238 | Critical | 9.8 | 2021-11-03 | Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow. |
CVE-2021-39237 | Medium | 4.6 | 2021-11-03 | Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential information disclosure. |
CVE-2021-3705 | Critical | 9.8 | 2021-11-01 | Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow an unauthorized user to reconfigure, reset the devi… |
CVE-2021-3704 | High | 7.5 | 2021-11-01 | Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow a Denial of Service on the device. |
CVE-2021-3440 | High | 7.8 | 2021-11-01 | HP Print and Scan Doctor, an application within the HP Smart App for Windows, is potentially vulnerable to local elevation of privilege. |
CVE-2021-29212 | Critical | 9.8 | 2021-11-01 | A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulne… |
CVE-2021-3662 | Medium | 5.4 | 2021-10-29 | Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS). |
CVE-2021-3441 | Medium | 4.8 | 2021-10-29 | A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting (XSS). |
CVE-2021-29728 | Medium | 4.9 | 2021-08-30 | IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its ow… |
CVE-2021-29723 | High | 7.5 | 2021-08-30 | IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly… |
CVE-2021-29722 | High | 7.5 | 2021-08-30 | IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly… |
CVE-2021-26586 | High | 7.5 | 2021-08-05 | A potential security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Softwar… |
CVE-2021-29736 | High | 8.8 | 2021-07-30 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote user to gain elevated privileges on the system. IBM X-Force ID: 201300. |
CVE-2021-20562 | Medium | 5.4 | 2021-07-27 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allow… |
CVE-2021-20560 | Medium | 5.4 | 2021-07-26 | IBM Sterling Connect:Direct Browser User Interface 1.4.1.1 and 1.5.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading… |
CVE-2021-29777 | Medium | 6.5 | 2021-06-24 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being dropped while b… |
CVE-2021-29703 | High | 7.5 | 2021-06-24 | Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server terminates abnormally when executing a special… |
CVE-2021-20579 | Medium | 6.5 | 2021-06-24 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who can create a view or inline SQL functi… |
CVE-2021-29754 | High | 8.8 | 2021-06-11 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association… |
CVE-2021-26584 | Medium | 6.1 | 2021-06-03 | A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following so… |
CVE-2021-29211 | Medium | 4.8 | 2021-05-25 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Se… |
CVE-2021-29210 | Medium | 4.8 | 2021-05-25 | A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO… |
CVE-2021-29209 | Medium | 4.8 | 2021-05-25 | A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO… |
CVE-2021-29208 | Medium | 4.8 | 2021-05-25 | A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO… |
CVE-2021-29207 | Medium | 4.8 | 2021-05-25 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Se… |
CVE-2021-29206 | Medium | 4.8 | 2021-05-25 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Se… |
CVE-2021-29205 | Medium | 4.8 | 2021-05-25 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Se… |
CVE-2021-29204 | Medium | 4.8 | 2021-05-25 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Se… |
CVE-2021-29202 | Medium | 6.7 | 2021-05-25 | A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for H… |
CVE-2021-29201 | Medium | 4.8 | 2021-05-25 | A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Se… |
CVE-2021-3438 | High | 7.8 | 2021-05-20 | A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege. |
CVE-2021-26583 | Critical | 9.8 | 2021-05-10 | A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution. |
CVE-2021-29203 | Critical | 9.8 | 2021-05-06 | A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior t… |
CVE-2021-20515 | Medium | 6.7 | 2021-04-30 | IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local privileged user could overflow a… |
CVE-2021-26582 | Medium | 6.1 | 2021-04-15 | A security vulnerability in HPE IceWall SSO Domain Gateway Option (Dgfw) module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windo… |
CVE-2021-20480 | Medium | 6.5 | 2021-04-08 | IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authen… |
CVE-2021-20354 | High | 7.5 | 2021-02-18 | IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL reques… |
CVE-2021-25140 | Critical | 9.8 | 2021-02-09 | A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application… |
CVE-2021-25139 | Critical | 9.8 | 2021-02-09 | A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application… |
CVE-2020-4949 | High | 8.2 | 2021-01-26 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attac… |
CVE-2020-7202 | Medium | 5.3 | 2021-01-05 | A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability c… |
CVE-2020-4762 | High | 8.8 | 2021-01-05 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated user to create a priv… |
CVE-2020-4761 | Medium | 5.3 | 2021-01-05 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive… |