HP
Page 8 of 26 — HP CVEs from a corpus of 2519, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7118 | High | 7.8 | 2019-04-09 | A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software earlier than version 2018.09.0. |
CVE-2018-7117 | Medium | 6.1 | 2019-04-09 | A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers ea… |
CVE-2018-1853 | Medium | 6.1 | 2019-04-08 | IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim… |
CVE-2017-2752 | Low | 2.1 | 2019-03-27 | A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android ap… |
CVE-2017-2748 | High | 7.5 | 2019-03-27 | A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified with early versions of the Isaac Mizrahi… |
CVE-2018-5927 | High | 7.3 | 2019-03-27 | HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code. |
CVE-2018-5926 | Critical | 9.1 | 2019-03-27 | A potential vulnerability has been identified in HP Remote Graphics Software’s certificate authentication process version 7.5.0 and earlier. |
CVE-2018-5923 | Critical | 9.8 | 2019-03-27 | In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow… |
CVE-2019-3484 | High | 7.8 | 2019-03-25 | Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7. |
CVE-2019-3483 | Medium | 6.5 | 2019-03-25 | Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7. |
CVE-2019-3482 | Medium | 6.5 | 2019-03-25 | Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7. |
CVE-2019-3481 | High | 7.1 | 2019-03-25 | Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7. |
CVE-2019-3480 | Medium | 6.1 | 2019-03-25 | Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7. |
CVE-2019-3479 | Critical | 9.8 | 2019-03-25 | Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7. |
CVE-2018-15532 | Low | 3.8 | 2019-03-21 | SynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive information about freed kernel addresses. |
CVE-2019-5736 | High | 8.6 | 2019-02-11 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host roo… |
CVE-2019-7317 | Medium | 5.3 | 2019-02-04 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. |
CVE-2018-5740 | High | 7.5 | 2019-01-16 | "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method… |
CVE-2019-2426 | Low | 3.7 | 2019-01-16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1… |
CVE-2019-2422 | Low | 3.1 | 2019-01-16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1… |
CVE-2018-18593 | Medium | 6.5 | 2018-12-31 | Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10… |
CVE-2018-7116 | High | 7.5 | 2018-12-03 | HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This pr… |
CVE-2018-7115 | Medium | 5.3 | 2018-12-03 | HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in dbman.exe opcode 10001 on Windows. This p… |
CVE-2018-7114 | Critical | 9.8 | 2018-12-03 | HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. This probl… |
CVE-2018-7113 | Medium | 6.6 | 2018-12-03 | A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the security restrictions for firmware upda… |
CVE-2018-7112 | Medium | 5.5 | 2018-12-03 | The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was res… |
CVE-2018-7111 | Medium | 5.3 | 2018-10-17 | A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identifi… |
CVE-2018-7076 | Critical | 9.8 | 2018-10-17 | A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04. |
CVE-2018-3214 | Medium | 5.3 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE: 6u… |
CVE-2018-3183 | Critical | 9.0 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE… |
CVE-2018-3180 | Medium | 5.6 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u2… |
CVE-2018-3169 | High | 8.3 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u… |
CVE-2018-3149 | High | 8.3 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u2… |
CVE-2018-3139 | Low | 3.1 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201… |
CVE-2018-3136 | Low | 3.4 | 2018-10-17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7… |
CVE-2018-5921 | High | 8.8 | 2018-10-03 | A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is k… |
CVE-2017-2751 | Medium | 4.6 | 2018-10-03 | A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in… |
CVE-2018-9069 | Medium | 5.9 | 2018-10-02 | In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially a… |
CVE-2018-7109 | Medium | 6.5 | 2018-09-27 | HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager (eIUM) v9.0FP1 with the cumulative patch for v9.0FP… |
CVE-2018-7105 | High | 7.2 | 2018-09-27 | A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE I… |
CVE-2018-7104 | Critical | 9.8 | 2018-09-27 | A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM… |
CVE-2018-7103 | Critical | 9.8 | 2018-09-27 | A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM… |
CVE-2018-7102 | High | 7.5 | 2018-09-27 | A security vulnerability in HPE Intelligent Management Center (iMC) PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal… |
CVE-2018-7101 | High | 7.5 | 2018-09-27 | A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prio… |
CVE-2018-6505 | High | 7.5 | 2018-09-20 | A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerabi… |
CVE-2018-6503 | Medium | 6.5 | 2018-09-20 | A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be e… |
CVE-2018-6502 | Medium | 6.5 | 2018-09-20 | A potential Reflected Cross-Site Scripting (XSS) Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81… |
CVE-2018-6501 | Medium | 6.5 | 2018-09-20 | Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center (ArcMC) for versions prior to 2.81. This vul… |
CVE-2018-6500 | High | 7.5 | 2018-09-20 | A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerabil… |
CVE-2018-7100 | Medium | 5.5 | 2018-08-14 | A potential security vulnerability has been identified in HPE OfficeConnect 1810 Switch Series (HP 1810-24G - P.2.22 and previous versions, HP 1810-48G PK.1.34… |
CVE-2018-7099 | Medium | 5.5 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow discl… |
CVE-2018-7098 | High | 8.4 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow direc… |
CVE-2018-7097 | High | 8.8 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cros… |
CVE-2018-7096 | Critical | 9.8 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow code… |
CVE-2018-7095 | Critical | 9.8 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow acce… |
CVE-2018-7093 | High | 8.6 | 2018-08-14 | A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to… |
CVE-2018-7077 | High | 7.5 | 2018-08-14 | A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), Configuration Manager (CM… |
CVE-2018-5925 | High | 7.8 | 2018-08-13 | A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer o… |
CVE-2018-5924 | Critical | 9.8 | 2018-08-13 | A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer ov… |
CVE-2018-7092 | High | 7.5 | 2018-08-06 | A potential security vulnerability has been identified in HPE Intelligent Management Center Platform (IMC Plat) 7.3 E0506P09. The vulnerability could be remote… |
CVE-2018-7091 | Medium | 6.1 | 2018-08-06 | HPE XP P9000 Command View Advanced Edition Software (CVAE) has open URL redirection vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr… |
CVE-2018-7090 | Medium | 6.1 | 2018-08-06 | HPE XP P9000 Command View Advanced Edition Software (CVAE) has local and remote cross site scripting vulnerability in versions 7.0.0-00 to earlier than 8.60-00… |
CVE-2018-7078 | High | 7.2 | 2018-08-06 | A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integrated Lights-Out 5 (iLO 5) earlier than v… |
CVE-2018-7075 | Medium | 6.1 | 2018-08-06 | A remote cross-site scripting (XSS) vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT version v7.3 (E0506). The vulnerability is fix… |
CVE-2018-7074 | Critical | 9.8 | 2018-08-06 | A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P07. The vulnerability was resolved in iMC PLAT 7… |
CVE-2018-7073 | Medium | 5.5 | 2018-08-06 | A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24. |
CVE-2018-7072 | Critical | 9.8 | 2018-08-06 | A remote bypass of security restrictions vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24. |
CVE-2018-7071 | Medium | 4.3 | 2018-08-06 | HPE has identified a remote access to sensitive information vulnerability in HPE Network Function Virtualization Director (NFVD) 4.2.1 prior to gui patch 3. |
CVE-2018-7070 | Medium | 5.3 | 2018-08-06 | HPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolve… |
CVE-2018-7069 | High | 7.5 | 2018-08-06 | HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is r… |
CVE-2018-7068 | Medium | 6.1 | 2018-08-06 | HPE has identified a remote HOST header attack vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF… |
CVE-2018-7059 | High | 8.8 | 2018-08-06 | Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon" permission could u… |
CVE-2018-7058 | Critical | 9.8 | 2018-08-06 | Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to ga… |
CVE-2018-5390 | High | 7.5 | 2018-08-06 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can… |
CVE-2017-9002 | Medium | 6.1 | 2018-08-06 | All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities. By exploiting this vulnerability, an attacker who can tr… |
CVE-2017-9001 | High | 8.1 | 2018-08-06 | Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failures through SSH. When… |
CVE-2017-9000 | Critical | 9.8 | 2018-08-06 | ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1… |
CVE-2017-8992 | Critical | 9.8 | 2018-08-06 | HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in… |
CVE-2017-8991 | Medium | 5.4 | 2018-08-06 | HPE has identified a cross site scripting (XSS) vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in H… |
CVE-2017-8990 | Critical | 9.8 | 2018-08-06 | A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Service Manager (WSM) Software earlier than version WS… |
CVE-2017-8989 | Critical | 9.1 | 2018-08-06 | A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection. |
CVE-2017-8988 | Critical | 9.8 | 2018-08-06 | A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00. The vulnerability… |
CVE-2017-8987 | High | 8.6 | 2018-08-06 | A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 (iLO 3) version v1.88 only. The vulnerability is resolve… |
CVE-2017-8968 | High | 7.8 | 2018-08-06 | A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 (hprest-1.5-79.x86_64.rpm, ilorest-2.0-403.x86_64… |
CVE-2016-8527 | Medium | 6.1 | 2018-08-06 | Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS). The vulnerability is present in the Visua… |
CVE-2016-8526 | High | 8.8 | 2018-08-06 | Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a way to permit XML parsers to access st… |
CVE-2016-4406 | Medium | 6.1 | 2018-08-06 | A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44. |
CVE-2016-4405 | High | 8.8 | 2018-08-06 | A remote code execution vulnerability was identified in HP Business Service Management (BSM) using Apache Commons Collection Java Deserialization versions v9.2… |
CVE-2016-4404 | Critical | 9.8 | 2018-08-06 | A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow co… |
CVE-2016-4403 | Critical | 9.8 | 2018-08-06 | A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow co… |
CVE-2016-4402 | Critical | 9.8 | 2018-08-06 | A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow co… |
CVE-2016-4400 | Medium | 5.4 | 2018-08-06 | A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could res… |
CVE-2016-4399 | Medium | 5.4 | 2018-08-06 | A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10. The vulnerability could res… |
CVE-2016-4398 | High | 8.8 | 2018-08-06 | A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch 2), 10.10 using… |
CVE-2016-4397 | High | 7.8 | 2018-08-06 | A local code execution security vulnerability was identified in HP Network Node Manager i (NNMi) v10.00, v10.10 and v10.20 Software. |
CVE-2016-4392 | Medium | 5.4 | 2018-08-06 | A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1. |
CVE-2016-4391 | Critical | 9.8 | 2018-08-06 | A remote code execution security vulnerability has been identified in all versions of the HP ArcSight WINC Connector prior to v7.3.0. |
CVE-2016-9597 | High | 7.5 | 2018-07-30 | It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making… |
CVE-2017-12151 | High | 7.4 | 2018-07-27 | A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection co… |
CVE-2017-3210 | High | 7.8 | 2018-07-24 | Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A n… |