Hpe Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/hpe/ Sun, 26 Feb 2023 06:50:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Hpe Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/hpe/ 32 32 CVE-2018-7094 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7094/ Sun, 26 Feb 2023 06:50:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7094/ A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA). The vulnerability may be exploited locally to allow disclosure of privileged information.

The post CVE-2018-7094 appeared first on CVE Vulnerability.

]]> A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA). The vulnerability may be exploited locally to allow disclosure of privileged information.

The post CVE-2018-7094 appeared first on CVE Vulnerability.

]]> CVE-2020-7205 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7205/ Sun, 26 Feb 2023 06:42:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7205/ A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. **Note:** This vulnerability is related to using insmod in GRUB2 in the specific impacted HPE product and HPE is addressing this […]

The post CVE-2020-7205 appeared first on CVE Vulnerability.

]]> A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. **Note:** This vulnerability is related to using insmod in GRUB2 in the specific impacted HPE product and HPE is addressing this issue. HPE has made the following software updates and mitigation information to resolve the vulnerability in Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. HPE provided latest Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting Toolkit which includes the GRUB2 patch to resolve this vulnerability. These new boot images will update GRUB2 and the Forbidden Signature Database (DBX). After the DBX is updated, users will not be able to boot to the older IP, SPP or Scripting ToolKit with Secure Boot enabled. HPE have provided a standalone DBX update tool to work with Microsoft Windows, and supported Linux Operating Systems. These tools can be used to update the Forbidden Signature Database (DBX) from within the OS. **Note:** This DBX update mitigates the GRUB2 issue with insmod enabled, and the “Boot Hole” issue for HPE signed GRUB2 applications.

The post CVE-2020-7205 appeared first on CVE Vulnerability.

]]> CVE-2020-7139 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7139/ Sun, 26 Feb 2023 06:42:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7139/ Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to access and modify sensitive information on the system. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100

The post CVE-2020-7139 appeared first on CVE Vulnerability.

]]> Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to access and modify sensitive information on the system. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100

The post CVE-2020-7139 appeared first on CVE Vulnerability.

]]> CVE-2020-7138 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7138/ Sun, 26 Feb 2023 06:42:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7138/ Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100

The post CVE-2020-7138 appeared first on CVE Vulnerability.

]]> Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100

The post CVE-2020-7138 appeared first on CVE Vulnerability.

]]> CVE-2020-7137 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7137/ Sun, 26 Feb 2023 06:42:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7137/ A validation issue in HPE Superdome Flex’s RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or later to resolve this issue.

The post CVE-2020-7137 appeared first on CVE Vulnerability.

]]> A validation issue in HPE Superdome Flex’s RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or later to resolve this issue.

The post CVE-2020-7137 appeared first on CVE Vulnerability.

]]> CVE-2019-11998 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11998/ Sun, 26 Feb 2023 06:29:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11998/ HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerability could allow an Administrator to bypass security restrictions and access multiple remote vulnerabilities including information disclosure, or denial of service. HPE has provided firmware updates that address the above vulnerabilities for the HPE Superdome Flex Server […]

The post CVE-2019-11998 appeared first on CVE Vulnerability.

]]> HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerability could allow an Administrator to bypass security restrictions and access multiple remote vulnerabilities including information disclosure, or denial of service. HPE has provided firmware updates that address the above vulnerabilities for the HPE Superdome Flex Server starting with firmware version v3.20.186 (not available online) and v3.20.206 (available online). Apply v3.20.206 (4 December 2019) or a newer version to resolve this issue. Please visit HPE Support Center https://support.hpe.com/hpesc/public/home to obtain the updated firmware for your product.

The post CVE-2019-11998 appeared first on CVE Vulnerability.

]]> CVE-2019-11996 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11996/ Sun, 26 Feb 2023 06:29:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11996/ Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.2.0, 4.5.5.0, 5.0.8.0 and 5.1.3.0.

The post CVE-2019-11996 appeared first on CVE Vulnerability.

]]> Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.2.0, 4.5.5.0, 5.0.8.0 and 5.1.3.0.

The post CVE-2019-11996 appeared first on CVE Vulnerability.

]]> CVE-2019-12001 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-12001/ Sun, 26 Feb 2023 06:29:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-12001/ A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and […]

The post CVE-2019-12001 appeared first on CVE Vulnerability.

]]> A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R001-01 and earlier; VL270R001-01 and earlier.

The post CVE-2019-12001 appeared first on CVE Vulnerability.

]]> CVE-2019-12002 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-12002/ Sun, 26 Feb 2023 06:29:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-12002/ A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and […]

The post CVE-2019-12002 appeared first on CVE Vulnerability.

]]> A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage version(s): GL225P001 and earlier; GL225P001 and earlier; VE270R001-01 and earlier; GL225P001 and earlier; VL270R001-01 and earlier; VL270R001-01 and earlier.

The post CVE-2019-12002 appeared first on CVE Vulnerability.

]]> CVE-2021-46846 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-46846/ Thu, 23 Feb 2023 14:13:13 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-46846/ Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.

The post CVE-2021-46846 appeared first on CVE Vulnerability.

]]> Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.

The post CVE-2021-46846 appeared first on CVE Vulnerability.

]]>