Hewlett Packard Enterprise

Records2515All Threatist records

Exploited (KEV)7In CISA KEV

CVSS critical598CVSS 9.0–10.0

CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2015-07113 Adobe Flash Player Integer Overflow Vulnerability CRITICAL 97KEV 2022-05-25 TI-2015-02747 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability CRITICAL 100KEV 2022-04-13 TI-2005-02634 HP OpenView Network Node Manager Remote Code Execution Vulnerability CRITICAL 100KEV 2022-03-25 TI-2012-01607 PHP-CGI Query String Parameter Vulnerability CRITICAL 100KEV 2022-03-25 TI-2013-04219 HP Multiple Products Remote Code Execution Vulnerability CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Intelligent Management Center 310 records HIGH Hp-ux 289 records CRITICAL Openview Network Node Manager 80 records CRITICAL System Management Homepage 78 records CRITICAL Instantos 56 records MEDIUM Xp7 Command View 53 records MEDIUM Systems Insight Manager 50 records CRITICAL Matrix Operating Environment 34 records CRITICAL

Records

23 records in Sitescope · all components

TI-2013-02114 CVE-2013-2367 · GHSA-x8p9-cjx3-wx24

Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used…

HIGH 80

Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.68895 Published 2013-07-31 No fix listed

TI-2012-02804 CVE-2012-3259 · GHSA-224f-2jgg-f9vc

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

HIGH 77

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.6022 Published 2012-09-25 No fix listed

TI-2013-04243 CVE-2013-4835 · GHSA-w66p-8v74-6j3w

The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows…

HIGH 70

The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-176…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.71003 Published 2013-11-04 No fix listed

TI-2012-02806 CVE-2012-3261 · GHSA-f8f4-fpvr-wchr

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

HIGH 70

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.40225 Published 2012-09-25 No fix listed

TI-2012-02805 CVE-2012-3260 · GHSA-gqhg-9fr6-8j4j

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

HIGH 70

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.40225 Published 2012-09-25 No fix listed

TI-2012-02808 CVE-2012-3263 · GHSA-7cfh-f685-x5qq

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

MEDIUM 54

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08585 Published 2012-09-25 No fix listed

TI-2012-02807 CVE-2012-3262 · GHSA-fqv9-pqwp-47c7

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

MEDIUM 54

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08585 Published 2012-09-25 No fix listed

TI-2017-10466 CVE-2017-14349 · GHSA-h3f8-qcmg-jp7m

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows…

MEDIUM 47

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02638 Published 2017-09-29 No fix listed CWE-269

TI-2013-05220 CVE-2013-6207 · GHSA-q7cv-vr5h-6j24

Unspecified vulnerability in the loadFileContents function in the SOAP implementation in…

MEDIUM 46

Unspecified vulnerability in the loadFileContents function in the SOAP implementation in HP SiteScope 10.1x, 11.1x, and 11.21 allows remote attackers to read arbitrary files or cause a denial of service via unknown vecto…

CVSS 2.0HIGH 9.4 Network No auth Interaction — EPSS 0.03372 Published 2014-03-11 No fix listed

TI-2015-01903 CVE-2015-2120 · GHSA-4p7c-p2rw-3pw7

Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and…

MEDIUM 44

Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka ZDI-CAN-2567.

CVSS 2.0HIGH 8.7 Network Low privileges Interaction — EPSS 0.03526 Published 2015-05-25 No fix listed

TI-2011-02097 CVE-2011-2401 · GHSA-rp88-j665-jvwh

Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote…

MEDIUM 43

Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors.

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.04129 Published 2011-07-29 No fix listed

TI-2015-02473 CVE-2015-2802 · GHSA-3fmj-978w-qxm2

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows…

MEDIUM 42

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, whic…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06375 Published 2020-02-04 No fix listed CWE-200

TI-2017-06444 CVE-2017-8952 · GHSA-r79f-f47p-h2gf

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

MEDIUM 41

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04842 Published 2018-02-15 No fix listed CWE-200

TI-2014-02097 CVE-2014-2614 · GHSA-mcv8-6886-g6ph

Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24…

MEDIUM 41

Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24 allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-2140.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0485 Published 2014-07-07 No fix listed CWE-287

TI-2012-02809 CVE-2012-3264 · GHSA-vgvh-8845-2838

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows…

MEDIUM 41

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05587 Published 2012-09-25 No fix listed

TI-2017-06443 CVE-2017-8951 · GHSA-prx7-hfh2-r9mm

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

LOW 35

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00665 Published 2018-02-15 No fix listed CWE-200

TI-2014-06550 CVE-2014-7882 · GHSA-8vfw-3w5p-w5qv

Unspecified vulnerability in HP SiteScope 11.1x and 11.2x allows remote authenticated…

LOW 29

Unspecified vulnerability in HP SiteScope 11.1x and 11.2x allows remote authenticated users to gain privileges via unknown vectors.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01989 Published 2015-02-02 No fix listed CWE-264

TI-2017-06442 CVE-2017-8950 · GHSA-x7gc-h9pg-938q

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

LOW 26

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0065 Published 2018-02-15 No fix listed CWE-200

TI-2017-06441 CVE-2017-8949 · GHSA-pvj5-p9r8-2cr7

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

LOW 26

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00648 Published 2018-02-15 No fix listed

TI-2011-02096 CVE-2011-2400 · GHSA-6r7x-82r7-jm49

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows…

LOW 26

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03249 Published 2011-07-29 No fix listed CWE-79

TI-2011-01505 CVE-2011-1726 · GHSA-v7ff-c7xw-37pw

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1…

LOW 26

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03287 Published 2011-05-03 No fix listed CWE-79

TI-2011-01506 CVE-2011-1727 · GHSA-85x6-4jmm-mx7r

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1…

LOW 24

Cross-site scripting (XSS) vulnerability in HP SiteScope 9.54, 10.13, 11.01, and 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an "HTML injection" issue.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02127 Published 2011-05-03 No fix listed CWE-79

TI-2007-04210 CVE-2007-4350 · GHSA-x3jg-4vr7-jq3q

Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0…

LOW 23

Cross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build 911 allows remote attackers to inject arbitrary web script or HTML via an SNMP trap message.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01637 Published 2008-10-21 No fix listed CWE-79

Open these records in search →

Critical	598
High	951
Medium	866
Low	100
No CVSS	0