Hp
Page 5 of 19 — Hp CVEs from a corpus of 1807, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-4728 | High | 8.8 | 2021-01-05 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary… |
CVE-2020-7203 | Critical | 9.8 | 2020-12-18 | A potential security vulnerability has been identified in HPE iLO Amplifier Pack server version 1.70. The vulnerability could be exploited to allow remote code… |
CVE-2020-7201 | High | 8.8 | 2020-12-18 | A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloaders. The vulnerability c… |
CVE-2020-7200 | Critical | 9.8 | 2020-12-18 | A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerability could be exploited to allow remote c… |
CVE-2020-4658 | Medium | 6.1 | 2020-12-16 | IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in… |
CVE-2020-4657 | Medium | 6.1 | 2020-12-16 | IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary… |
CVE-2019-4738 | Medium | 6.5 | 2020-12-10 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from… |
CVE-2020-7199 | Critical | 9.8 | 2020-12-02 | A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vul… |
CVE-2020-4937 | High | 7.5 | 2020-11-20 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt… |
CVE-2020-7198 | High | 8.8 | 2020-11-06 | There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to… |
CVE-2020-7207 | Medium | 6.8 | 2020-11-05 | A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This at… |
CVE-2020-7197 | Critical | 9.8 | 2020-10-26 | SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC) 3.7.0.0 is an off node multiarray manager web application an… |
CVE-2020-7196 | Medium | 6.5 | 2020-10-26 | The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that… |
CVE-2020-11853 | High | 8.8 | 2020-10-22 | Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018… |
CVE-2020-7195 | High | 8.8 | 2020-10-19 | A iccselectrules expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7194 | High | 8.8 | 2020-10-19 | A perfaddormoddevicemonitor expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version… |
CVE-2020-7193 | High | 8.8 | 2020-10-19 | A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7192 | High | 8.8 | 2020-10-19 | A devicethresholdconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7191 | High | 8.8 | 2020-10-19 | A devsoftsel expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to i… |
CVE-2020-7190 | High | 8.8 | 2020-10-19 | A deviceselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to… |
CVE-2020-7189 | High | 8.8 | 2020-10-19 | A faultflasheventselectfact expression language injectionremote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(… |
CVE-2020-7188 | High | 8.8 | 2020-10-19 | A userselectpagingcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s… |
CVE-2020-7187 | High | 8.8 | 2020-10-19 | A reportpage index expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7186 | High | 8.8 | 2020-10-19 | A powershellconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s… |
CVE-2020-7185 | High | 8.8 | 2020-10-19 | A tvxlanlegend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to… |
CVE-2020-7184 | High | 8.8 | 2020-10-19 | A viewbatchtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) ver… |
CVE-2020-7183 | High | 8.8 | 2020-10-19 | A forwardredirect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7182 | High | 8.8 | 2020-10-19 | A sshconfig expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iM… |
CVE-2020-7181 | High | 8.8 | 2020-10-19 | A smsrulesdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7180 | High | 8.8 | 2020-10-19 | A ictexpertdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pri… |
CVE-2020-7179 | High | 8.8 | 2020-10-19 | A thirdpartyperfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(… |
CVE-2020-7178 | High | 8.8 | 2020-10-19 | A mediaforaction expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7177 | High | 8.8 | 2020-10-19 | A wmiconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7176 | High | 8.8 | 2020-10-19 | A viewtaskresultdetailfact expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(… |
CVE-2020-7175 | High | 8.8 | 2020-10-19 | A iccselectdymicparam expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): P… |
CVE-2020-7174 | High | 8.8 | 2020-10-19 | A soapconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pri… |
CVE-2020-7173 | High | 8.8 | 2020-10-19 | A actionselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): P… |
CVE-2020-7172 | Critical | 9.8 | 2020-10-19 | A templateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7171 | Critical | 9.8 | 2020-10-19 | A guidatadetail expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior t… |
CVE-2020-7170 | Critical | 9.8 | 2020-10-19 | A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC P… |
CVE-2020-7169 | Critical | 9.8 | 2020-10-19 | A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7168 | Critical | 9.8 | 2020-10-19 | A selectusergroup expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7167 | Critical | 9.8 | 2020-10-19 | A quicktemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): P… |
CVE-2020-7166 | Critical | 9.8 | 2020-10-19 | A operatorgrouptreeselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) ve… |
CVE-2020-7165 | Critical | 9.8 | 2020-10-19 | A iccselectcommand expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7164 | Critical | 9.8 | 2020-10-19 | A operationselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7163 | Critical | 9.8 | 2020-10-19 | A navigationto expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to… |
CVE-2020-7162 | Critical | 9.8 | 2020-10-19 | A operatorgroupselectcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) versio… |
CVE-2020-7161 | Critical | 9.8 | 2020-10-19 | A reporttaskselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7160 | Critical | 9.8 | 2020-10-19 | A iccselectdeviceseries expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7159 | Critical | 9.8 | 2020-10-19 | A customtemplateselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7158 | Critical | 9.8 | 2020-10-19 | A perfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7157 | Critical | 9.8 | 2020-10-19 | A selviewnavcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pri… |
CVE-2020-7156 | Critical | 9.8 | 2020-10-19 | A faultinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pri… |
CVE-2020-7155 | Critical | 9.8 | 2020-10-19 | A select expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC P… |
CVE-2020-7154 | Critical | 9.8 | 2020-10-19 | A ifviewselectpage expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7153 | Critical | 9.8 | 2020-10-19 | A iccselectdevtype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7152 | Critical | 9.8 | 2020-10-19 | A faultparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior t… |
CVE-2020-7151 | Critical | 9.8 | 2020-10-19 | A faulttrapgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7150 | Critical | 9.8 | 2020-10-19 | A faultstatchoosefaulttype expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(… |
CVE-2020-7149 | Critical | 9.8 | 2020-10-19 | A ictexpertcsvdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7148 | Critical | 9.8 | 2020-10-19 | A deployselectsoftware expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-7147 | Critical | 9.8 | 2020-10-19 | A deployselectbootrom expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): P… |
CVE-2020-7146 | Critical | 9.8 | 2020-10-19 | A devgroupselect expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7145 | Critical | 9.8 | 2020-10-19 | A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-7144 | Critical | 9.8 | 2020-10-19 | A comparefilesresult expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pr… |
CVE-2020-7143 | Critical | 9.8 | 2020-10-19 | A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prio… |
CVE-2020-7142 | Critical | 9.8 | 2020-10-19 | A eventinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Pri… |
CVE-2020-7141 | Critical | 9.8 | 2020-10-19 | A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior… |
CVE-2020-24652 | Critical | 9.8 | 2020-10-19 | A addvsiinterfaceinfo expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): P… |
CVE-2020-24651 | Critical | 9.8 | 2020-10-19 | A syslogtempletselectwin expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s)… |
CVE-2020-24650 | Critical | 9.8 | 2020-10-19 | A legend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC P… |
CVE-2020-24649 | Critical | 9.8 | 2020-10-19 | A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s… |
CVE-2020-24648 | Critical | 9.8 | 2020-10-19 | A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) ve… |
CVE-2020-24647 | Critical | 9.8 | 2020-10-19 | A remote accessmgrservlet classname input validation code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior t… |
CVE-2020-24646 | Critical | 9.8 | 2020-10-19 | A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC… |
CVE-2020-24630 | High | 8.8 | 2020-10-19 | A remote operatoronlinelist_content privilege escalation vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT… |
CVE-2020-24629 | Critical | 9.8 | 2020-10-19 | A remote urlaccesscontroller authentication bypass vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E… |
CVE-2020-4629 | Low | 3.3 | 2020-09-30 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information from a detailed techni… |
CVE-2020-4578 | Medium | 5.4 | 2020-09-10 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co… |
CVE-2020-4559 | High | 7.5 | 2020-08-28 | IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input. IBM X-Force ID: 183613. |
CVE-2020-15596 | Medium | 6.7 | 2020-08-12 | The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks vi… |
CVE-2019-18619 | High | 7.8 | 2020-07-22 | Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to… |
CVE-2019-18618 | Medium | 6.0 | 2020-07-22 | Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows… |
CVE-2020-7206 | Critical | 9.8 | 2020-07-17 | HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection vulnerability. |
CVE-2019-12000 | Medium | 6.6 | 2020-07-17 | HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when HTTPS is used between the USSD and an… |
CVE-2020-7140 | Medium | 6.1 | 2020-07-08 | A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site scripting (XSS). HPE… |
CVE-2020-4320 | Medium | 6.5 | 2020-06-16 | IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name… |
CVE-2020-4310 | High | 7.5 | 2020-06-16 | IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion logi… |
CVE-2020-12695 | High | 7.5 | 2020-06-08 | The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a differe… |
CVE-2020-10136 | Medium | 5.3 | 2020-06-02 | IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access… |
CVE-2020-4365 | Medium | 4.3 | 2020-05-14 | IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker coul… |
CVE-2020-4299 | Medium | 4.3 | 2020-05-14 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user through a specially crafted HTTP request. IBM… |
CVE-2020-4259 | Medium | 6.5 | 2020-05-14 | IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cook… |
CVE-2020-7135 | High | 7.8 | 2020-04-27 | A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE serv… |
CVE-2020-7134 | Medium | 6.5 | 2020-04-24 | A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. |
CVE-2020-7133 | Critical | 9.8 | 2020-04-24 | A unauthorized remote access vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. |
CVE-2020-7131 | Critical | 9.0 | 2020-04-24 | This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series Non… |
CVE-2020-7132 | Medium | 5.4 | 2020-04-23 | A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow Reflected Cross Sit… |
CVE-2019-18917 | Medium | 6.5 | 2020-03-16 | A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassing account lockout. |