TI-2023-06024 CVE-2023-6573 · GHSA-xw8x-r2rg-vmq9
HPE OneView may have a missing passphrase during restore.
Priority LOW 24
HPE OneView may have a missing passphrase during restore.
Vulnerabilities
22 records
TI-2023-27501 CVE-2023-50275 · GHSA-hc66-p838-6xfp
HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.
Priority LOW 35
HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.
TI-2023-27500 CVE-2023-50274 · GHSA-xr6f-9r29-5gq3
HPE OneView may allow command injection with local privilege escalation.
Priority LOW 37
HPE OneView may allow command injection with local privilege escalation.
TI-2023-14667 CVE-2023-30909 · GHSA-php2-3gv6-62rw
A remote authentication bypass issue exists in some OneView APIs.
Priority MEDIUM 52
A remote authentication bypass issue exists in some OneView APIs.
TI-2023-14666 CVE-2023-30908 · GHSA-mj28-6mv8-vqx9
A remote authentication bypass issue exists in a OneView API.
Priority MEDIUM 52
A remote authentication bypass issue exists in a OneView API.
TI-2023-12663 CVE-2023-28084 · GHSA-m796-g35g-ww8p
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
Priority LOW 24
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
TI-2023-12669 CVE-2023-28090 · GHSA-mqq2-gjcf-j3cq
An HPE OneView appliance dump may expose SNMPv3 read credentials
Priority LOW 24
An HPE OneView appliance dump may expose SNMPv3 read credentials
TI-2023-12668 CVE-2023-28089 · GHSA-mhqh-6m58-844q
An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules
Priority LOW 32
An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules
TI-2023-12667 CVE-2023-28088 · GHSA-2m28-wgxj-v265
An HPE OneView appliance dump may expose SAN switch administrative credentials
Priority LOW 35
An HPE OneView appliance dump may expose SAN switch administrative credentials
TI-2023-12666 CVE-2023-28087 · GHSA-wg8w-8qrr-6452
An HPE OneView appliance dump may expose OneView user accounts
Priority LOW 24
An HPE OneView appliance dump may expose OneView user accounts
TI-2023-12665 CVE-2023-28086 · GHSA-22mh-fcv5-gcmq
An HPE OneView appliance dump may expose proxy credential settings
Priority LOW 24
An HPE OneView appliance dump may expose proxy credential settings
TI-2023-12670 CVE-2023-28091 · GHSA-fc8v-777q-r95w
HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive…
Priority LOW 24
HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump
TI-2022-11270 CVE-2022-28625 · GHSA-xfhf-jh8m-pmv3
Sensitive information in log files in HPE OneView
Priority LOW 24
A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01.
TI-2022-11261 CVE-2022-28616 · GHSA-ghmv-w35w-vhj5
Server-side request forgery in HPE OneView
Priority MEDIUM 45
A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0.
TI-2022-07758 CVE-2022-23706 · GHSA-mw25-f23g-rg34
Cross-site scripting in HPE OneView
Priority LOW 28
A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0.
TI-2022-11262 CVE-2022-28617 · GHSA-rv55-hj2q-9p3q
A remote bypass security restrictions vulnerability was discovered in HPE OneView…
Priority MEDIUM 46
A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0.
TI-2022-07752 CVE-2022-23700 · GHSA-x5h8-3mmg-4jcf
A local unauthorized read access to files vulnerability was discovered in HPE OneView…
Priority LOW 25
A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6.
TI-2022-07751 CVE-2022-23699 · GHSA-xx2r-x7vm-xjjj
A local authentication restriction bypass vulnerability was discovered in HPE OneView…
Priority LOW 34
A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6.
TI-2022-07750 CVE-2022-23698 · GHSA-6m6q-vwv8-q74m
A remote unauthenticated disclosure of information vulnerability was discovered in HPE…
Priority LOW 36
A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6.
TI-2022-07749 CVE-2022-23697 · GHSA-fxm9-49w7-pwfx
Cross-site scripting in HPE OneView
Priority LOW 28
A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6.
TI-2020-05810 CVE-2020-7198 · GHSA-74j4-4jv7-68pg
There is a remote escalation of privilege possible for a malicious user that has a…
Priority MEDIUM 42
There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer.
TI-2014-02085 CVE-2014-2602 · GHSA-jpq5-g9cr-9hpq
Unspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to…
Priority LOW 33
Unspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to gain privileges via unknown vectors.