Xeon E7 8890 V4 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-11	CVE-2022-38083	Improper Initialization vulnerability in Intel products Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. local low complexity intel CWE-665	4.4
2022-05-12	CVE-2021-0154	Improper Input Validation vulnerability in Intel products Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. local low complexity intel CWE-20	7.2
2022-05-12	CVE-2021-0155	Unchecked Return Value vulnerability in Intel products Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. local low complexity intel CWE-252	2.1
2022-05-12	CVE-2021-0189	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. local low complexity intel CWE-119	7.2
2022-05-12	CVE-2021-33123	Unspecified vulnerability in Intel products Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. local low complexity intel	7.8
2022-05-12	CVE-2021-33124	Out-of-bounds Write vulnerability in Intel products Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. local low complexity intel CWE-787	6.7
2019-11-14	CVE-2019-0151	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel CWE-119	6.7
2019-11-14	CVE-2018-12207	Improper Input Validation vulnerability in multiple products Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access. local low complexity intel debian opensuse fedoraproject canonical f5 redhat oracle CWE-20	6.5
2019-11-14	CVE-2019-11137	Improper Input Validation vulnerability in multiple products Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. local low complexity intel hpe CWE-20	8.2
2019-11-14	CVE-2019-11136	Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. local low complexity intel hpe	6.7