Vulnerabilities > HP

DATE CVE VULNERABILITY TITLE RISK
2018-08-06 CVE-2017-8992 Unspecified vulnerability in HP Centralview Fraud Risk Management
HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1.
network
low complexity
hp
critical
9.8
2018-08-06 CVE-2017-8991 Cross-site Scripting vulnerability in HP Centralview Fraud Risk Management
HPE has identified a cross site scripting (XSS) vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1.
network
low complexity
hp CWE-79
5.4
2018-08-06 CVE-2017-8990 Unspecified vulnerability in HP IMC Wireless Service Manager 7.1/7.2/7.3
A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Service Manager (WSM) Software earlier than version WSM 7.3 (E0506).
network
low complexity
hp
critical
9.8
2018-08-06 CVE-2017-8989 Open Redirect vulnerability in HP Icewall SSO 10.0/11.0
A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection.
network
low complexity
hp CWE-601
critical
9.1
2018-08-06 CVE-2017-8988 Unspecified vulnerability in HP XP Command View 5.8.000/5.8.003/5.9.001
A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00.
network
low complexity
hp
critical
9.8
2018-08-06 CVE-2017-8987 Unspecified vulnerability in HP Integrated Lights-Out 3 Firmware 1.88
A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 (iLO 3) version v1.88 only.
network
low complexity
hp
8.6
2018-08-06 CVE-2017-8968 Unspecified vulnerability in HP Restful Interface Tool 1.5/2.0
A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 (hprest-1.5-79.x86_64.rpm, ilorest-2.0-403.x86_64.rpm).
local
low complexity
hp
7.8
2018-08-06 CVE-2016-8527 Cross-site Scripting vulnerability in HP Airwave
Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS).
network
low complexity
hp CWE-79
6.1
2018-08-06 CVE-2016-8526 XXE vulnerability in HP Airwave
Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE).
network
low complexity
hp CWE-611
8.8
2018-08-06 CVE-2016-4406 Cross-site Scripting vulnerability in HP products
A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all versions prior to v2.44.
network
low complexity
hp CWE-79
6.1