Vulnerabilities > HP > 3Par Service Processor

DATE CVE VULNERABILITY TITLE RISK
2019-08-09 CVE-2019-5400 Session Fixation vulnerability in HP 3Par Service Processor Firmware
A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
network
low complexity
hp CWE-384
6.5
6.5
2019-08-09 CVE-2019-5399 Unspecified vulnerability in HP 3Par Service Processor Firmware
A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
network
low complexity
hp
critical
 9.7
9.7
2019-08-09 CVE-2019-5398 Cross-site Scripting vulnerability in HP 3Par Service Processor Firmware
A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
network
hp CWE-79
3.5
3.5
2019-08-09 CVE-2019-5397 Cross-site Scripting vulnerability in HP 3Par Service Processor Firmware
A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
network
low complexity
hp CWE-79
critical
 9.7
9.7
2019-08-09 CVE-2019-5396 Unspecified vulnerability in HP 3Par Service Processor Firmware
A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
network
low complexity
hp
critical
 9.7
9.7
2019-08-09 CVE-2019-5395 Unrestricted Upload of File with Dangerous Type vulnerability in HP 3Par Service Processor Firmware
A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
network
low complexity
hp CWE-434
6.5
6.5
2019-07-09 CVE-2019-11991 Information Exposure vulnerability in HP 3Par Service Processor Firmware
HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4.
network
low complexity
hp CWE-200
critical
 9.7
9.7