Vulnerabilities > HP

DATE CVE VULNERABILITY TITLE RISK
2018-08-06 CVE-2017-9000 Information Exposure vulnerability in HP Arubaos
ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1.0.4 FIPS and non-FIPS versions of software are both affected equally is vulnerable to unauthenticated arbitrary file access.
network
low complexity
hp CWE-200
critical
9.8
2018-08-06 CVE-2017-8992 Unspecified vulnerability in HP Centralview Fraud Risk Management
HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1.
network
low complexity
hp
critical
9.8
2018-08-06 CVE-2017-8991 Cross-site Scripting vulnerability in HP Centralview Fraud Risk Management
HPE has identified a cross site scripting (XSS) vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1.
network
low complexity
hp CWE-79
5.4
2018-08-06 CVE-2017-8990 Unspecified vulnerability in HP IMC Wireless Service Manager 7.1/7.2/7.3
A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Service Manager (WSM) Software earlier than version WSM 7.3 (E0506).
network
low complexity
hp
critical
9.8
2018-08-06 CVE-2017-8989 Open Redirect vulnerability in HP Icewall SSO 10.0/11.0
A security vulnerability in HPE IceWall SSO Dfw 10.0 and 11.0 on RHEL, HP-UX, and Windows could be exploited remotely to allow URL Redirection.
network
low complexity
hp CWE-601
critical
9.1
2018-08-06 CVE-2017-8988 Unspecified vulnerability in HP XP Command View 5.8.000/5.8.003/5.9.001
A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00.
network
low complexity
hp
critical
9.8
2018-08-06 CVE-2017-8987 Unspecified vulnerability in HP Integrated Lights-Out 3 Firmware 1.88
A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 (iLO 3) version v1.88 only.
network
low complexity
hp
8.6
2018-08-06 CVE-2017-8968 Unspecified vulnerability in HP Restful Interface Tool 1.5/2.0
A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 (hprest-1.5-79.x86_64.rpm, ilorest-2.0-403.x86_64.rpm).
local
low complexity
hp
7.8
2018-08-06 CVE-2016-8527 Cross-site Scripting vulnerability in HP Airwave
Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS).
network
low complexity
hp CWE-79
6.1
2018-08-06 CVE-2016-8526 XXE vulnerability in HP Airwave
Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE).
network
low complexity
hp CWE-611
8.8