Vulnerabilidades em Hewlett Packard Enterprise

363 resultados
Análise Vexday

O portfólio de vulnerabilidades catalogadas da Hewlett Packard Enterprise soma 311 CVEs, com taxa de exploração ativa abaixo da média geral do catálogo — nenhuma entrada confirmada no CISA KEV —, o que sugere menor pressão imediata de ameaças em curso. Ainda assim, a presença de 13 CVEs com prova de conceito pública e 3 de severidade crítica mantém a superfície de ataque relevante para equipes de gestão de risco. O destaque de atenção é CVE-2017-12542, com score EPSS de 0,9934, indicando probabilidade muito elevada de exploração, e associada ao tipo de falha mais recorrente no portfólio, CWE-78 (OS Command Injection), padrão que historicamente viabiliza execução remota de comandos com alto impacto. A ausência de novas CVEs nos últimos 90 dias reduz a pressão de remediação imediata, mas a antiguidade de vulnerabilidades de alto EPSS ainda ativas reforça a necessidade de revisão do inventário de ativos expostos.

CVE-2017-12496—A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was reEPSS 5.6%CVE-2017-12526—A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was reEPSS 5.6%CVE-2017-12503—A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was reEPSS 5.6%CVE-2017-12517—A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was reEPSS 5.6%CVE-2017-8987—A Unauthenticated Remote Denial of Service vulnerability was identified in HPE Integrated Lights-Out 3 (iLO 3) version v1.88 only. The vulneEPSS 5.5%CVE-2016-8512—A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found.EPSS 5.5%CVE-2018-7111—A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a mEPSS 5.3%CVE-2017-5812—A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.EPSS 5.3%CVE-2017-8980—A Remote Disclosure of Information vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.EPSS 5.3%CVE-2017-9000—ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.EPSS 5.1%CVE-2016-4398—A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (paEPSS 5.0%CVE-2016-8518—A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.EPSS 5.0%CVE-2016-8516—A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.EPSS 5.0%CVE-2016-4405—A remote code execution vulnerability was identified in HP Business Service Management (BSM) using Apache Commons Collection Java DeserializEPSS 4.9%CVE-2017-8952—A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.EPSS 4.8%CVE-2017-8979—Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to allow authentication bypass, codEPSS 4.8%CVE-2017-5797—A Remote Unauthenticated Disclosure of Information vulnerability in HPE Intelligent Management Center (IMC) SOM version v7.3 (E0501) was fouEPSS 4.7%CVE-2019-11991—HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 tEPSS 4.7%CVE-2017-5810—A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.EPSS 4.7%CVE-2017-12554—A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT iMC Plat 7.3 E0504P2 and earlier was found.EPSS 4.7%