Hewlett Packard Enterprise

Records2515All Threatist records

Exploited (KEV)7In CISA KEV

CVSS critical598CVSS 9.0–10.0

CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2015-07113 Adobe Flash Player Integer Overflow Vulnerability CRITICAL 97KEV 2022-05-25 TI-2015-02747 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability CRITICAL 100KEV 2022-04-13 TI-2005-02634 HP OpenView Network Node Manager Remote Code Execution Vulnerability CRITICAL 100KEV 2022-03-25 TI-2012-01607 PHP-CGI Query String Parameter Vulnerability CRITICAL 100KEV 2022-03-25 TI-2013-04219 HP Multiple Products Remote Code Execution Vulnerability CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Intelligent Management Center 310 records HIGH Hp-ux 289 records CRITICAL Openview Network Node Manager 80 records CRITICAL System Management Homepage 78 records CRITICAL Instantos 56 records MEDIUM Xp7 Command View 53 records MEDIUM Systems Insight Manager 50 records CRITICAL Matrix Operating Environment 34 records CRITICAL

Records

11 records in Operations Orchestration · all components

TI-2016-07017 CVE-2016-8519 · GHSA-9934-8j5j-9gj3

Deserialization of untrusted data in Hewlett Packard Enterprise Operations Orchestration

MEDIUM 64

A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to v10.70 was found.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.27582 Published 2018-02-15 No fix listed CWE-502

TI-2012-02803 CVE-2012-3258 · GHSA-5q6p-qrmq-r3hp

Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote…

MEDIUM 55

Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09921 Published 2012-09-19 No fix listed

TI-2017-06485 CVE-2017-8994 · GHSA-vr6q-6hw7-2592

Improper input validation in Micro Focus HPE Operations Orchestration

MEDIUM 54

A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0984 Published 2017-10-10 Fixed in 10.80 CWE-20

TI-2016-01830 CVE-2016-1997 · GHSA-8hfx-m4wg-mcm3

HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content…

MEDIUM 52

HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Co…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06689 Published 2016-03-22 No fix listed CWE-20

TI-2015-01893 CVE-2015-2109 · GHSA-68rx-77gv-3q44

Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to…

MEDIUM 40

Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04082 Published 2015-03-31 No fix listed

TI-2018-04772 CVE-2018-6490 · GHSA-55c5-rqrw-7hrr

MFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS)

LOW 38

Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02575 Published 2018-03-02 No fix listed CWE-20

TI-2015-04585 CVE-2015-5451 · GHSA-2943-4gp2-qhj2

Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central…

LOW 33

Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01495 Published 2015-11-23 No fix listed CWE-352

TI-2013-05206 CVE-2013-6192 · GHSA-gvmc-3mhr-8q6c

Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9…

LOW 32

Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00968 Published 2013-12-17 No fix listed CWE-352

TI-2013-05205 CVE-2013-6191 · GHSA-7v3c-4hwm-q77g

Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows…

LOW 25

Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02491 Published 2013-12-17 No fix listed CWE-79

TI-2010-03783 CVE-2010-3985 · GHSA-3x6x-4wg5-r5hg

Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when…

LOW 24

Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02006 Published 2010-10-26 No fix listed CWE-79

TI-2015-01892 CVE-2015-2108 · GHSA-vvm7-hf3m-v4xp

Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and…

LOW 21

Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote authenticated users to obtain sensitive information via unknown vectors.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01929 Published 2015-03-31 No fix listed CWE-200

Open these records in search →

Critical	598
High	951
Medium	866
Low	100
No CVSS	0