HP
Page 9 of 26 — HP CVEs from a corpus of 2519, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-2973 | Medium | 5.9 | 2018-07-18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181… |
CVE-2018-2952 | Low | 3.7 | 2018-07-18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java… |
CVE-2018-2940 | Medium | 4.3 | 2018-07-18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191… |
CVE-2018-12463 | Critical | 9.8 | 2018-07-12 | An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbi… |
CVE-2017-7658 | Critical | 9.8 | 2018-06-26 | In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two co… |
CVE-2017-7657 | Critical | 9.8 | 2018-06-26 | In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encodin… |
CVE-2018-6493 | High | 8.8 | 2018-05-22 | SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10… |
CVE-2018-6492 | Medium | 4.7 | 2018-05-22 | Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Netwo… |
CVE-2018-2815 | Medium | 5.3 | 2018-04-19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Jav… |
CVE-2018-2814 | High | 8.3 | 2018-04-19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u… |
CVE-2018-2800 | Medium | 4.2 | 2018-04-19 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162… |
CVE-2018-2799 | Medium | 5.3 | 2018-04-19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u1… |
CVE-2018-2798 | Medium | 5.3 | 2018-04-19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u18… |
CVE-2018-2797 | Medium | 5.3 | 2018-04-19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u18… |
CVE-2018-2796 | Medium | 5.3 | 2018-04-19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java… |
CVE-2018-2795 | Medium | 5.3 | 2018-04-19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE… |
CVE-2018-2794 | High | 7.7 | 2018-04-19 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u1… |
CVE-2018-2790 | Low | 3.1 | 2018-04-19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7… |
CVE-2018-2783 | High | 7.4 | 2018-04-19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE… |
CVE-2018-6490 | Medium | 5.9 | 2018-03-02 | Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x. This vulnerability could be remotely exploited to allow Denial… |
CVE-2018-6653 | Medium | 5.3 | 2018-03-01 | comforte SWAP 1049 through 1069 and 20.0.0 through 21.5.3 (as used in SSLOBJ on HPE NonStop SSL T0910, and in the comforte SecurCS, SecurFTP, SecurLib/SSL-AT… |
CVE-2017-8985 | Medium | 5.3 | 2018-02-15 | HPE XP Storage using Hitachi Global Link Manager (HGLM) has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-0… |
CVE-2017-8984 | High | 8.8 | 2018-02-15 | A remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506P03 was found. |
CVE-2017-8983 | High | 8.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found. |
CVE-2017-8982 | High | 7.5 | 2018-02-15 | A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found. |
CVE-2017-8981 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506 was found. |
CVE-2017-8980 | High | 7.5 | 2018-02-15 | A Remote Disclosure of Information vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. |
CVE-2017-8979 | Critical | 9.8 | 2018-02-15 | Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to allow authentication bypass, code execution, and de… |
CVE-2017-8978 | Medium | 4.6 | 2018-02-15 | A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found. |
CVE-2017-8977 | Critical | 9.1 | 2018-02-15 | A Remote Denial of Service vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found. |
CVE-2017-8976 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found. |
CVE-2017-8975 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found. |
CVE-2017-8974 | Medium | 4.4 | 2018-02-15 | A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02… |
CVE-2017-8973 | Medium | 4.3 | 2018-02-15 | An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found. |
CVE-2017-8972 | Medium | 4.3 | 2018-02-15 | A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found. |
CVE-2017-8971 | Medium | 4.3 | 2018-02-15 | A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found. |
CVE-2017-8970 | Medium | 5.3 | 2018-02-15 | A remote unauthenticated disclosure of information vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found. |
CVE-2017-8969 | Medium | 5.7 | 2018-02-15 | An improper input validation vulnerability in HPE Insight Control version 7.6 LR1 was found. |
CVE-2017-8967 | High | 8.8 | 2018-02-15 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. |
CVE-2017-8966 | High | 8.8 | 2018-02-15 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. |
CVE-2017-8965 | High | 8.8 | 2018-02-15 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. |
CVE-2017-8964 | High | 8.8 | 2018-02-15 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. |
CVE-2017-8963 | High | 8.8 | 2018-02-15 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. |
CVE-2017-8962 | High | 8.8 | 2018-02-15 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. |
CVE-2017-8961 | High | 8.8 | 2018-02-15 | A directory traversal vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.3 E0504P02 could allow remote code execution. |
CVE-2017-8960 | Critical | 9.8 | 2018-02-15 | An Authentication Bypass vulnerability in HPE MSA 1040 and MSA 2040 SAN Storage IN version GL220P008 and earlier was found. |
CVE-2017-8959 | High | 8.8 | 2018-02-15 | An Authentication Bypass vulnerability in HPE MSA 1040 and HPE MSA 2040 SAN Storage in version GL220P008 and earlier and was found. |
CVE-2017-8958 | High | 8.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 and earlier was found. |
CVE-2017-8957 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. |
CVE-2017-8956 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. |
CVE-2017-8955 | High | 7.5 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. |
CVE-2017-8954 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. |
CVE-2017-8953 | Medium | 5.4 | 2018-02-15 | A Remote Cross-Site Scripting (XSS) vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found. |
CVE-2017-8952 | High | 7.5 | 2018-02-15 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. |
CVE-2017-8951 | High | 7.8 | 2018-02-15 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. |
CVE-2017-8950 | Medium | 5.5 | 2018-02-15 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. |
CVE-2017-8949 | Medium | 5.5 | 2018-02-15 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. |
CVE-2017-8948 | Critical | 9.8 | 2018-02-15 | A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software versions v10.0x, v10.1x, v10.2x was found. |
CVE-2017-8947 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found. |
CVE-2017-8946 | High | 8.3 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0 and 1.0.1 was found. |
CVE-2017-8945 | Medium | 6.1 | 2018-02-15 | A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Federation Agent version 3.0 was found. |
CVE-2017-8944 | High | 7.5 | 2018-02-15 | A Remote Disclosure of Information vulnerability in HPE Cloud Optimizer version v3.0x was found. |
CVE-2017-5829 | High | 7.8 | 2018-02-15 | An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
CVE-2017-5828 | High | 8.1 | 2018-02-15 | An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
CVE-2017-5827 | Medium | 5.4 | 2018-02-15 | A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
CVE-2017-5826 | High | 8.8 | 2018-02-15 | An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
CVE-2017-5825 | High | 8.8 | 2018-02-15 | A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
CVE-2017-5824 | Critical | 9.8 | 2018-02-15 | An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
CVE-2017-5823 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. |
CVE-2017-5822 | High | 7.5 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. |
CVE-2017-5821 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. |
CVE-2017-5820 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. |
CVE-2017-5819 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. |
CVE-2017-5818 | High | 7.5 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. |
CVE-2017-5817 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. |
CVE-2017-5816 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. |
CVE-2017-5815 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. |
CVE-2017-5814 | Critical | 9.8 | 2018-02-15 | A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. |
CVE-2017-5813 | Medium | 6.3 | 2018-02-15 | A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. |
CVE-2017-5812 | High | 7.5 | 2018-02-15 | A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. |
CVE-2017-5811 | High | 7.5 | 2018-02-15 | A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. |
CVE-2017-5810 | Critical | 9.8 | 2018-02-15 | A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found. |
CVE-2017-5809 | Medium | 5.5 | 2018-02-15 | A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found. |
CVE-2017-5808 | High | 7.5 | 2018-02-15 | A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found. |
CVE-2017-5807 | Critical | 9.8 | 2018-02-15 | A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found. |
CVE-2017-5806 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. |
CVE-2017-5805 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. |
CVE-2017-5804 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. |
CVE-2017-5803 | High | 7.5 | 2018-02-15 | A Remote Disclosure of Information vulnerability in HPE NonStop Servers using SSH Service version L series: T0801L02 through T0801L02^ABX; J and H series: T080… |
CVE-2017-5801 | High | 7.5 | 2018-02-15 | A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found. |
CVE-2017-5800 | Medium | 5.4 | 2018-02-15 | A Remote Cross-Site Scripting (XSS) vulnerability in HPE Operations Bridge Analytics version v3.0 was found. |
CVE-2017-5799 | High | 8.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3… |
CVE-2017-5798 | Medium | 6.1 | 2018-02-15 | A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP versions prior to 3.4.2 RP201 (for OCMP 3… |
CVE-2017-5797 | High | 7.5 | 2018-02-15 | A Remote Unauthenticated Disclosure of Information vulnerability in HPE Intelligent Management Center (IMC) SOM version v7.3 (E0501) was found. |
CVE-2017-5796 | High | 8.8 | 2018-02-15 | A Remote Cross Site Request Forgery (CSRF) vulnerability in HPE 2620 Series Network Switches version RA.15.05.0006 was found. |
CVE-2017-5795 | Medium | 6.5 | 2018-02-15 | A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center (IMC) version PLAT 7.2 E0403P06 was found. |
CVE-2017-5794 | High | 8.8 | 2018-02-15 | A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found. |
CVE-2017-5793 | High | 8.8 | 2018-02-15 | A Remote Arbitrary Code Execution vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found. |
CVE-2017-5792 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. |
CVE-2017-5790 | Critical | 9.8 | 2018-02-15 | A remote deserialization of untrusted data vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found. |