TI-2023-14667 CVE-2023-30909 · GHSA-php2-3gv6-62rw
A remote authentication bypass issue exists in some OneView APIs.
Priority MEDIUM 52
A remote authentication bypass issue exists in some OneView APIs.
Hewlett Packard Enterprise
Records2515All Threatist records
Exploited (KEV)7In CISA KEV
CVSS critical598CVSS 9.0–10.0
CVSS high951CVSS 7.0–8.9
Exploited now
Hewlett Packard Enterprise records in CISA KEVTI-2015-04610 ISC BIND Data Processing Errors Vulnerability TI-2015-07113 Adobe Flash Player Integer Overflow Vulnerability TI-2015-02747 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability TI-2005-02634 HP OpenView Network Node Manager Remote Code Execution Vulnerability TI-2012-01607 PHP-CGI Query String Parameter Vulnerability TI-2013-04219 HP Multiple Products Remote Code Execution Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
22 records in Oneview · all components
TI-2023-14666 CVE-2023-30908 · GHSA-mj28-6mv8-vqx9
A remote authentication bypass issue exists in a OneView API.
Priority MEDIUM 52
A remote authentication bypass issue exists in a OneView API.
TI-2022-11262 CVE-2022-28617 · GHSA-rv55-hj2q-9p3q
A remote bypass security restrictions vulnerability was discovered in HPE OneView…
Priority MEDIUM 46
A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0.
TI-2022-11261 CVE-2022-28616 · GHSA-ghmv-w35w-vhj5
Server-side request forgery in HPE OneView
Priority MEDIUM 45
A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0.
TI-2020-05810 CVE-2020-7198 · GHSA-74j4-4jv7-68pg
There is a remote escalation of privilege possible for a malicious user that has a…
Priority MEDIUM 42
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer.
TI-2023-27500 CVE-2023-50274 · GHSA-xr6f-9r29-5gq3
HPE OneView may allow command injection with local privilege escalation.
Priority LOW 37
HPE OneView may allow command injection with local privilege escalation.
TI-2022-07750 CVE-2022-23698 · GHSA-6m6q-vwv8-q74m
A remote unauthenticated disclosure of information vulnerability was discovered in HPE…
Priority LOW 36
A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6.
TI-2023-27501 CVE-2023-50275 · GHSA-hc66-p838-6xfp
HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.
Priority LOW 35
HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.
TI-2023-12667 CVE-2023-28088 · GHSA-2m28-wgxj-v265
An HPE OneView appliance dump may expose SAN switch administrative credentials
Priority LOW 35
An HPE OneView appliance dump may expose SAN switch administrative credentials
TI-2022-07751 CVE-2022-23699 · GHSA-xx2r-x7vm-xjjj
A local authentication restriction bypass vulnerability was discovered in HPE OneView…
Priority LOW 34
A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6.
TI-2014-02085 CVE-2014-2602 · GHSA-jpq5-g9cr-9hpq
Unspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to…
Priority LOW 33
Unspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to gain privileges via unknown vectors.
TI-2023-12668 CVE-2023-28089 · GHSA-mhqh-6m58-844q
An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules
Priority LOW 32
An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules
TI-2022-07758 CVE-2022-23706 · GHSA-mw25-f23g-rg34
Cross-site scripting in HPE OneView
Priority LOW 28
A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0.
TI-2022-07749 CVE-2022-23697 · GHSA-fxm9-49w7-pwfx
Cross-site scripting in HPE OneView
Priority LOW 28
A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6.
TI-2022-07752 CVE-2022-23700 · GHSA-x5h8-3mmg-4jcf
A local unauthorized read access to files vulnerability was discovered in HPE OneView…
Priority LOW 25
A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6.
TI-2023-12670 CVE-2023-28091 · GHSA-fc8v-777q-r95w
HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive…
Priority LOW 24
HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump
TI-2023-12669 CVE-2023-28090 · GHSA-mqq2-gjcf-j3cq
An HPE OneView appliance dump may expose SNMPv3 read credentials
Priority LOW 24
An HPE OneView appliance dump may expose SNMPv3 read credentials
TI-2023-12666 CVE-2023-28087 · GHSA-wg8w-8qrr-6452
An HPE OneView appliance dump may expose OneView user accounts
Priority LOW 24
An HPE OneView appliance dump may expose OneView user accounts
TI-2023-12665 CVE-2023-28086 · GHSA-22mh-fcv5-gcmq
An HPE OneView appliance dump may expose proxy credential settings
Priority LOW 24
An HPE OneView appliance dump may expose proxy credential settings
TI-2023-12663 CVE-2023-28084 · GHSA-m796-g35g-ww8p
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
Priority LOW 24
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
TI-2023-06024 CVE-2023-6573 · GHSA-xw8x-r2rg-vmq9
HPE OneView may have a missing passphrase during restore.
Priority LOW 24
HPE OneView may have a missing passphrase during restore.
TI-2022-11270 CVE-2022-28625 · GHSA-xfhf-jh8m-pmv3
Sensitive information in log files in HPE OneView
Priority LOW 24
A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01.