Hp: Security Vulnerabilities
A remote authentication bypass issue exists in some
OneView APIs.
CVSS Score
9.8
EPSS Score
0.05
Published
2023-09-14
A remote authentication bypass issue exists in a OneView API.
CVSS Score
9.8
EPSS Score
0.016
Published
2023-09-07
Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users.
CVSS Score
7.2
EPSS Score
0.004
Published
2023-09-05
Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS.
CVSS Score
7.2
EPSS Score
0.004
Published
2023-09-05
Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.
CVSS Score
6.1
EPSS Score
0.006
Published
2023-09-05
Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.
CVSS Score
8.8
EPSS Score
0.001
Published
2023-09-05
Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23,
before 09-66-17,
before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02; HiRDB Server With Addtional Function: before 09-60-2M, before 09-65-/W
, before 09-66-/Q
; HiRDB Structured Data Access Facility: before 09-60-39, before 10-03-12, before 10-04-06, before 10-06-02.
CVSS Score
5.3
EPSS Score
0.002
Published
2023-08-29
IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.
CVSS Score
7.5
EPSS Score
0.0
Published
2023-08-22
Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element.
CVSS Score
7.3
EPSS Score
0.001
Published
2023-08-16
A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system.
CVSS Score
7.8
EPSS Score
0.001
Published
2023-08-15