Vulnerabilities > HPE

DATE CVE VULNERABILITY TITLE RISK
2023-06-16 CVE-2023-30905 Unspecified vulnerability in HPE products
The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced privilege.
local
low complexity
hpe
7.8
2023-04-25 CVE-2023-28084 Insufficiently Protected Credentials vulnerability in multiple products
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
local
low complexity
hpe hp CWE-522
5.5
2023-04-14 CVE-2023-28085 Unspecified vulnerability in HPE Oneview Global Dashboard 2.31/2.32
An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials
local
low complexity
hpe
5.5
2023-03-22 CVE-2022-37940 Open Redirect vulnerability in HPE products
Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series.
network
low complexity
hpe CWE-601
6.1
2023-03-22 CVE-2023-1168 Unspecified vulnerability in HPE Arubaos-Cx
An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine.
network
low complexity
hpe
8.8
2023-03-10 CVE-2022-37939 Unspecified vulnerability in HPE products
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers.
local
low complexity
hpe
5.5
2023-03-01 CVE-2022-37936 Deserialization of Untrusted Data vulnerability in HPE Serviceguard for Linux
Unauthenticated Java deserialization vulnerability in Serviceguard Manager
network
low complexity
hpe CWE-502
critical
9.8
2023-03-01 CVE-2022-37937 Out-of-bounds Write vulnerability in HPE Serviceguard for Linux
Pre-auth memory corruption in HPE Serviceguard
network
low complexity
hpe CWE-787
critical
9.8
2023-03-01 CVE-2022-37938 Server-Side Request Forgery (SSRF) vulnerability in HPE Serviceguard for Linux
Unauthenticated server side request forgery in HPE Serviceguard Manager
network
low complexity
hpe CWE-918
critical
9.8
2023-01-05 CVE-2022-37933 Injection vulnerability in HPE products
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers.
local
low complexity
hpe CWE-74
7.8