Vulnerabilities > HP > High

DATE CVE VULNERABILITY TITLE RISK
2018-09-27 CVE-2018-7101 Unspecified vulnerability in HP products
A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30.
network
low complexity
hp
7.5
2018-09-20 CVE-2018-6505 Unspecified vulnerability in HP Arcsight Management Center 2.0/2.9.1
A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81.
network
low complexity
hp
7.5
2018-09-20 CVE-2018-6500 Path Traversal vulnerability in HP Arcsight Management Center 2.0/2.9.1
A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81.
network
low complexity
hp CWE-22
7.5
2018-08-14 CVE-2018-7098 Path Traversal vulnerability in HP 3Par Service Provider Sp4.2.0/Sp4.3.0/Sp4.4.0
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).
local
low complexity
hp CWE-22
8.4
2018-08-14 CVE-2018-7097 Cross-Site Request Forgery (CSRF) vulnerability in HP 3Par Service Provider Sp4.2.0/Sp4.3.0/Sp4.4.0
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7).
network
low complexity
hp CWE-352
8.8
2018-08-14 CVE-2018-7093 Unspecified vulnerability in HP products
A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to v1.58, and Moonshot Component Pack prior to v2.55 could be remotely exploited to create a denial of service.
network
low complexity
hp
8.6
2018-08-14 CVE-2018-7077 Unspecified vulnerability in HP products
A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), Configuration Manager (CM 8.5.0-00 and prior to 8.6.0-00) could be exploited to allow local and remote unauthorized access to sensitive information.
network
low complexity
hp
7.5
2018-08-13 CVE-2018-5925 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HP products
A security vulnerability has been identified with certain HP Inkjet printers.
local
low complexity
hp CWE-119
7.8
2018-08-06 CVE-2018-7092 Path Traversal vulnerability in HP Intelligent Management Center 7.3
A potential security vulnerability has been identified in HPE Intelligent Management Center Platform (IMC Plat) 7.3 E0506P09.
network
low complexity
hp CWE-22
7.5
2018-08-06 CVE-2018-7078 Unspecified vulnerability in HP products
A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integrated Lights-Out 5 (iLO 5) earlier than version v1.30.
network
low complexity
hp
7.2