Vulnerabilities > HP

DATE CVE VULNERABILITY TITLE RISK
2021-05-20 CVE-2021-3438 Classic Buffer Overflow vulnerability in multiple products
A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.
local
low complexity
hp samsung CWE-120
7.8
2021-05-10 CVE-2021-26583 Unspecified vulnerability in HP ILO Amplifier Pack 1.70/1.80/1.81
A potential security vulnerability was identified in HPE iLO Amplifier Pack.
network
low complexity
hp
critical
9.8
2021-05-06 CVE-2021-29203 Missing Authentication for Critical Function vulnerability in HP Edgeline Infrastructure Manager 1.21
A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22.
network
low complexity
hp CWE-306
critical
9.8
2021-04-15 CVE-2021-26582 Cross-site Scripting vulnerability in HP Icewall SSO Dgfw 10.0/11.0
A security vulnerability in HPE IceWall SSO Domain Gateway Option (Dgfw) module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting (XSS).
network
low complexity
hp CWE-79
6.1
2021-02-09 CVE-2021-25140 Path Traversal vulnerability in HP Moonshot Provisioning Manager 1.20
A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20.
network
low complexity
hp CWE-22
critical
9.8
2021-02-09 CVE-2021-25139 Out-of-bounds Write vulnerability in HP Moonshot Provisioning Manager 1.20
A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20.
network
low complexity
hp CWE-787
critical
9.8
2021-01-05 CVE-2020-7202 Unspecified vulnerability in HP Integrated Lights-Out 4 and Integrated Lights-Out 5
A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware.
network
low complexity
hp
5.3
2020-12-18 CVE-2020-7203 Unspecified vulnerability in HP ILO Amplifier Pack 1.70
A potential security vulnerability has been identified in HPE iLO Amplifier Pack server version 1.70.
network
low complexity
hp
critical
9.8
2020-12-18 CVE-2020-7201 Cross-Site Request Forgery (CSRF) vulnerability in HP products
A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloaders.
network
low complexity
hp CWE-352
8.8
2020-12-18 CVE-2020-7200 Unspecified vulnerability in HP Systems Insight Manager 7.6
A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6.
network
low complexity
hp
critical
9.8