HP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive…
Priority LOW 29CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
HP Onboard Administrator (OA) before 3.50 allows remote attackers to obtain sensitive information via unspecified vectors.
Why it matters now
EPSS 0.0384 90th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 32
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hp:onboard_administrator:*:*:*:*:*:*:*:* | up to 3.32 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:1.00:*:*:*:*:*:*:* | 1.00 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:1.01:*:*:*:*:*:*:* | 1.01 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:1.10:*:*:*:*:*:*:* | 1.10 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:1.11:*:*:*:*:*:*:* | 1.11 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:1.12:*:*:*:*:*:*:* | 1.12 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:1.20:*:*:*:*:*:*:* | 1.20 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:1.30:*:*:*:*:*:*:* | 1.30 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.01:*:*:*:*:*:*:* | 2.01 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.02:a:*:*:*:*:*:* | 2.02 a | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:a:hp:onboard_administrator:*:*:*:*:*:*:*:* Versions up to 3.32 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:1.10:*:*:*:*:*:*:* Versions 1.10 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:1.11:*:*:*:*:*:*:* Versions 1.11 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:1.12:*:*:*:*:*:*:* Versions 1.12 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:1.20:*:*:*:*:*:*:* Versions 1.20 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:1.30:*:*:*:*:*:*:* Versions 1.30 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.01:*:*:*:*:*:*:* Versions 2.01 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.02:a:*:*:*:*:*:* Versions 2.02 a Vulnerable ·Hewlett Packard Enterprise
Show 22 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hp:onboard_administrator:2.04:*:*:*:*:*:*:* | 2.04 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.10:*:*:*:*:*:*:* | 2.10 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.11:*:*:*:*:*:*:* | 2.11 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.12:*:*:*:*:*:*:* | 2.12 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.13:*:*:*:*:*:*:* | 2.13 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.20:*:*:*:*:*:*:* | 2.20 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.21:*:*:*:*:*:*:* | 2.21 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.25:*:*:*:*:*:*:* | 2.25 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.31:*:*:*:*:*:*:* | 2.31 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.32:*:*:*:*:*:*:* | 2.32 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.41:*:*:*:*:*:*:* | 2.41 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.50:*:*:*:*:*:*:* | 2.50 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.51:*:*:*:*:*:*:* | 2.51 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.52:*:*:*:*:*:*:* | 2.52 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:2.60:*:*:*:*:*:*:* | 2.60 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:3.00:*:*:*:*:*:*:* | 3.00 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:3.10:*:*:*:*:*:*:* | 3.10 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:3.11:*:*:*:*:*:*:* | 3.11 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:3.20:a:*:*:*:*:*:* | 3.20 a | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:3.21:*:*:*:*:*:*:* | 3.21 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:3.30:*:*:*:*:*:*:* | 3.30 | Vulnerable | Hewlett Packard Enterprise |
| cpe:2.3:a:hp:onboard_administrator:3.31:*:*:*:*:*:*:* | 3.31 | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:a:hp:onboard_administrator:2.04:*:*:*:*:*:*:* Versions 2.04 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.10:*:*:*:*:*:*:* Versions 2.10 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.11:*:*:*:*:*:*:* Versions 2.11 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.12:*:*:*:*:*:*:* Versions 2.12 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.13:*:*:*:*:*:*:* Versions 2.13 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.20:*:*:*:*:*:*:* Versions 2.20 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.21:*:*:*:*:*:*:* Versions 2.21 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.25:*:*:*:*:*:*:* Versions 2.25 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.31:*:*:*:*:*:*:* Versions 2.31 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.32:*:*:*:*:*:*:* Versions 2.32 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.41:*:*:*:*:*:*:* Versions 2.41 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.50:*:*:*:*:*:*:* Versions 2.50 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.51:*:*:*:*:*:*:* Versions 2.51 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.52:*:*:*:*:*:*:* Versions 2.52 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:2.60:*:*:*:*:*:*:* Versions 2.60 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:3.00:*:*:*:*:*:*:* Versions 3.00 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:3.10:*:*:*:*:*:*:* Versions 3.10 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:3.11:*:*:*:*:*:*:* Versions 3.11 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:3.20:a:*:*:*:*:*:* Versions 3.20 a Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:3.21:*:*:*:*:*:*:* Versions 3.21 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:3.30:*:*:*:*:*:*:* Versions 3.30 Vulnerable ·Hewlett Packard Enterprise
- cpe:2.3:a:hp:onboard_administrator:3.31:*:*:*:*:*:*:* Versions 3.31 Vulnerable ·Hewlett Packard Enterprise
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2012-0130
- 2026-10-03 Alias added: GHSA-v496-mmfc-rqmw
- 2026-10-19 EPSS moved to the 90th–95th percentile
References
—
More Hewlett Packard Enterprise Onboard Administrator vulnerabilities
- TI-2012-00128 HP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended… CVSS 2.0HIGH 7.6
- TI-2012-00127 HP Onboard Administrator (OA) before 3.50 allows remote attackers to redirect users to… CVSS 2.0MEDIUM 5.8
- TI-2011-02785 Unspecified vulnerability in HP Onboard Administrator (OA) 3.21 through 3.31 allows… CVSS 2.0MEDIUM 6.4
- TI-2020-05744 Cross-site scripting in HPE Onboard Administrator CVSS 3.1MEDIUM 5.4
Sources
- CVE-2012-0130 · CVE Program
- CVE-2012-0130 · NVD
- FIRST EPSS
- GHSA-v496-mmfc-rqmw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences