Vulnerabilities > HPE

DATE CVE VULNERABILITY TITLE RISK
2021-02-09 CVE-2021-3191 Unspecified vulnerability in HPE web Viewpoint
Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ (L) and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and T0986H01^AAC through T0986H01^AAI (J and H).
network
low complexity
hpe
8.8
2021-02-09 CVE-2021-22267 Authentication Bypass by Capture-replay vulnerability in HPE web Viewpoint
Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP (L) and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through T0952H01^AAQ, T0986H01 through T0986H01^AAE, T0665H01^AAO, and T0662H01^AAO (J and H).
network
high complexity
hpe CWE-294
5.9
2021-02-09 CVE-2021-25141 A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware.
local
low complexity
arubanetworks hpe
4.4
2021-02-08 CVE-2021-26576 Command Injection vulnerability in HPE Baseboard Management Controller
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so uploadsshkey function.
local
low complexity
hpe CWE-77
7.8
2021-02-08 CVE-2021-26577 Classic Buffer Overflow vulnerability in HPE Baseboard Management Controller
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function.
local
low complexity
hpe CWE-120
7.8
2021-02-08 CVE-2021-26575 Path Traversal vulnerability in HPE Baseboard Management Controller
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletesolvideofile function.
local
low complexity
hpe CWE-22
7.8
2021-02-08 CVE-2021-26574 Path Traversal vulnerability in HPE Baseboard Management Controller
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletevideofile function.
local
low complexity
hpe CWE-22
7.8
2021-02-08 CVE-2021-26573 Classic Buffer Overflow vulnerability in HPE Baseboard Management Controller
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg function.
local
low complexity
hpe CWE-120
7.8
2021-02-08 CVE-2021-25172 Command Injection vulnerability in HPE Baseboard Management Controller
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so websetdefaultlangcfg function.
local
low complexity
hpe CWE-77
7.8
2021-02-08 CVE-2021-26572 Classic Buffer Overflow vulnerability in HPE Baseboard Management Controller
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.
local
low complexity
hpe CWE-120
7.8