Hp: Security Vulnerabilities
An HPE OneView appliance dump may expose OneView user accounts
CVSS Score
5.5
EPSS Score
0.002
Published
2023-04-25
An HPE OneView appliance dump may expose SAN switch administrative credentials
CVSS Score
7.8
EPSS Score
0.002
Published
2023-04-25
An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules
CVSS Score
7.1
EPSS Score
0.002
Published
2023-04-25
An HPE OneView appliance dump may expose SNMPv3 read credentials
CVSS Score
5.5
EPSS Score
0.002
Published
2023-04-25
HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump
CVSS Score
5.5
EPSS Score
0.002
Published
2023-04-14
IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248416.
CVSS Score
5.4
EPSS Score
0.004
Published
2023-04-02
A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out.
CVSS Score
8.3
EPSS Score
0.004
Published
2023-03-22
IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service using a specially crafted URL. IBM X-Force ID: 248296.
CVSS Score
5.9
EPSS Score
0.011
Published
2023-03-01
HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.
CVSS Score
5.5
EPSS Score
0.002
Published
2023-03-01
IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted table access is used. IBM X-Force ID: 241671.
CVSS Score
5.9
EPSS Score
0.006
Published
2023-02-17