| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-6316 | Hig | 0.49 | 7.5 | 0.02 | Feb 15, 2018 | Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti… | ||
| CVE-2018-5767 | Cri | 0.70 | 9.8 | 0.47 | Feb 15, 2018 | An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code execution on the device with a crafted password parameter for the COOKIE header. | ||
| CVE-2017-8993 | Med | 0.35 | 5.4 | 0.01 | Feb 15, 2018 | A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version v9.30, v9.31, v9.32, v9.40 was found. | ||
| CVE-2017-8985 | Med | 0.34 | 5.3 | 0.00 | Feb 15, 2018 | HPE XP Storage using Hitachi Global Link Manager (HGLM) has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00. | ||
| CVE-2017-8984 | Hig | 0.58 | 8.8 | 0.11 | Feb 15, 2018 | A remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506P03 was found. | ||
| CVE-2017-8983 | Hig | 0.57 | 8.8 | 0.03 | Feb 15, 2018 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found. | ||
| CVE-2017-8982 | Hig | 0.53 | 7.5 | 0.14 | Feb 15, 2018 | A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found. | ||
| CVE-2017-8981 | Cri | 0.64 | 9.8 | 0.09 | Feb 15, 2018 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506 was found. | ||
| CVE-2017-8980 | Hig | 0.49 | 7.5 | 0.05 | Feb 15, 2018 | A Remote Disclosure of Information vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. | ||
| CVE-2017-8979 | Cri | 0.64 | 9.8 | 0.05 | Feb 15, 2018 | Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to allow authentication bypass, code execution, and denial of service. | ||
| CVE-2017-8978 | Med | 0.30 | 4.6 | 0.01 | Feb 15, 2018 | A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found. | ||
| CVE-2017-8977 | Cri | 0.59 | 9.1 | 0.04 | Feb 15, 2018 | A Remote Denial of Service vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found. | ||
| CVE-2017-8976 | Cri | 0.65 | 9.8 | 0.18 | Feb 15, 2018 | A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found. | ||
| CVE-2017-8975 | Cri | 0.65 | 9.8 | 0.18 | Feb 15, 2018 | A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found. | ||
| CVE-2017-8974 | Med | 0.29 | 4.4 | 0.01 | Feb 15, 2018 | A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL was found. | ||
| CVE-2017-8973 | Med | 0.28 | 4.3 | 0.01 | Feb 15, 2018 | An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found. | ||
| CVE-2017-8972 | Med | 0.28 | 4.3 | 0.01 | Feb 15, 2018 | A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found. | ||
| CVE-2017-8971 | Med | 0.28 | 4.3 | 0.01 | Feb 15, 2018 | A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found. | ||
| CVE-2017-8970 | Med | 0.35 | 5.3 | 0.03 | Feb 15, 2018 | A remote unauthenticated disclosure of information vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found. | ||
| CVE-2017-8969 | Med | 0.37 | 5.7 | 0.01 | Feb 15, 2018 | An improper input validation vulnerability in HPE Insight Control version 7.6 LR1 was found. | ||
| CVE-2017-8967 | Hig | 0.57 | 8.8 | 0.02 | Feb 15, 2018 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. | ||
| CVE-2017-8966 | Hig | 0.57 | 8.8 | 0.03 | Feb 15, 2018 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. | ||
| CVE-2017-8965 | Hig | 0.57 | 8.8 | 0.02 | Feb 15, 2018 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. | ||
| CVE-2017-8964 | Hig | 0.57 | 8.8 | 0.02 | Feb 15, 2018 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. | ||
| CVE-2017-8963 | Hig | 0.57 | 8.8 | 0.02 | Feb 15, 2018 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. | ||
| CVE-2017-8962 | Hig | 0.57 | 8.8 | 0.03 | Feb 15, 2018 | A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. | ||
| CVE-2017-8961 | Hig | 0.59 | 8.8 | 0.19 | Feb 15, 2018 | A directory traversal vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.3 E0504P02 could allow remote code execution. | ||
| CVE-2017-8960 | Cri | 0.64 | 9.8 | 0.02 | Feb 15, 2018 | An Authentication Bypass vulnerability in HPE MSA 1040 and MSA 2040 SAN Storage IN version GL220P008 and earlier was found. | ||
| CVE-2017-8959 | Hig | 0.57 | 8.8 | 0.01 | Feb 15, 2018 | An Authentication Bypass vulnerability in HPE MSA 1040 and HPE MSA 2040 SAN Storage in version GL220P008 and earlier and was found. | ||
| CVE-2017-8958 | Hig | 0.58 | 8.8 | 0.11 | Feb 15, 2018 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 and earlier was found. | ||
| CVE-2017-8957 | Cri | 0.65 | 9.8 | 0.18 | Feb 15, 2018 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. | ||
| CVE-2017-8956 | Cri | 0.65 | 9.8 | 0.10 | Feb 15, 2018 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found. | ||
| CVE-2017-8955 | Hig | 0.50 | 7.5 | 0.12 | Feb 15, 2018 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. | ||
| CVE-2017-8954 | Cri | 0.65 | 9.8 | 0.18 | Feb 15, 2018 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found. | ||
| CVE-2017-8953 | Med | 0.35 | 5.4 | 0.01 | Feb 15, 2018 | A Remote Cross-Site Scripting (XSS) vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found. | ||
| CVE-2017-8952 | Hig | 0.49 | 7.5 | 0.05 | Feb 15, 2018 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. | ||
| CVE-2017-8951 | Hig | 0.51 | 7.8 | 0.01 | Feb 15, 2018 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. | ||
| CVE-2017-8950 | Med | 0.36 | 5.5 | 0.01 | Feb 15, 2018 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. | ||
| CVE-2017-8949 | Med | 0.36 | 5.5 | 0.01 | Feb 15, 2018 | A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found. | ||
| CVE-2017-8948 | Cri | 0.64 | 9.8 | 0.08 | Feb 15, 2018 | A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software versions v10.0x, v10.1x, v10.2x was found. | ||
| CVE-2017-8947 | Cri | 0.66 | 9.8 | 0.30 | Feb 15, 2018 | A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found. | ||
| CVE-2017-8946 | Hig | 0.55 | 8.3 | 0.11 | Feb 15, 2018 | A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0 and 1.0.1 was found. | ||
| CVE-2017-8945 | Med | 0.40 | 6.1 | 0.02 | Feb 15, 2018 | A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Federation Agent version 3.0 was found. | ||
| CVE-2017-8944 | Hig | 0.49 | 7.5 | 0.06 | Feb 15, 2018 | A Remote Disclosure of Information vulnerability in HPE Cloud Optimizer version v3.0x was found. | ||
| CVE-2017-5829 | Hig | 0.51 | 7.8 | 0.01 | Feb 15, 2018 | An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. | ||
| CVE-2017-5828 | Hig | 0.53 | 8.1 | 0.02 | Feb 15, 2018 | An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. | ||
| CVE-2017-5827 | Med | 0.35 | 5.4 | 0.01 | Feb 15, 2018 | A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. | ||
| CVE-2017-5826 | Hig | 0.57 | 8.8 | 0.03 | Feb 15, 2018 | An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. | ||
| CVE-2017-5825 | Hig | 0.57 | 8.8 | 0.02 | Feb 15, 2018 | A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. | ||
| CVE-2017-5824 | Cri | 0.65 | 9.8 | 0.19 | Feb 15, 2018 | An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found. |
- risk 0.49cvss 7.5epss 0.02
Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti…
- risk 0.70cvss 9.8epss 0.47
An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code execution on the device with a crafted password parameter for the COOKIE header.
- risk 0.35cvss 5.4epss 0.01
A Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version v9.30, v9.31, v9.32, v9.40 was found.
- risk 0.34cvss 5.3epss 0.00
HPE XP Storage using Hitachi Global Link Manager (HGLM) has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00.
- risk 0.58cvss 8.8epss 0.11
A remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506P03 was found.
- risk 0.57cvss 8.8epss 0.03
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found.
- risk 0.53cvss 7.5epss 0.14
A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found.
- risk 0.64cvss 9.8epss 0.09
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506 was found.
- risk 0.49cvss 7.5epss 0.05
A Remote Disclosure of Information vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.
- risk 0.64cvss 9.8epss 0.05
Security vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited remotely to allow authentication bypass, code execution, and denial of service.
- risk 0.30cvss 4.6epss 0.01
A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found.
- risk 0.59cvss 9.1epss 0.04
A Remote Denial of Service vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found.
- risk 0.65cvss 9.8epss 0.18
A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found.
- risk 0.65cvss 9.8epss 0.18
A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found.
- risk 0.29cvss 4.4epss 0.01
A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL was found.
- risk 0.28cvss 4.3epss 0.01
An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.
- risk 0.28cvss 4.3epss 0.01
A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.
- risk 0.28cvss 4.3epss 0.01
A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.
- risk 0.35cvss 5.3epss 0.03
A remote unauthenticated disclosure of information vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.
- risk 0.37cvss 5.7epss 0.01
An improper input validation vulnerability in HPE Insight Control version 7.6 LR1 was found.
- risk 0.57cvss 8.8epss 0.02
A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.
- risk 0.57cvss 8.8epss 0.03
A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.
- risk 0.57cvss 8.8epss 0.02
A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.
- risk 0.57cvss 8.8epss 0.02
A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.
- risk 0.57cvss 8.8epss 0.02
A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.
- risk 0.57cvss 8.8epss 0.03
A Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.
- risk 0.59cvss 8.8epss 0.19
A directory traversal vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.3 E0504P02 could allow remote code execution.
- risk 0.64cvss 9.8epss 0.02
An Authentication Bypass vulnerability in HPE MSA 1040 and MSA 2040 SAN Storage IN version GL220P008 and earlier was found.
- risk 0.57cvss 8.8epss 0.01
An Authentication Bypass vulnerability in HPE MSA 1040 and HPE MSA 2040 SAN Storage in version GL220P008 and earlier and was found.
- risk 0.58cvss 8.8epss 0.11
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 and earlier was found.
- risk 0.65cvss 9.8epss 0.18
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.
- risk 0.65cvss 9.8epss 0.10
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
- risk 0.50cvss 7.5epss 0.12
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.
- risk 0.65cvss 9.8epss 0.18
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.
- risk 0.35cvss 5.4epss 0.01
A Remote Cross-Site Scripting (XSS) vulnerability in HPE LoadRunner v12.53 and earlier and HPE Performance Center version v12.53 and earlier was found.
- risk 0.49cvss 7.5epss 0.05
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.
- risk 0.51cvss 7.8epss 0.01
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.
- risk 0.36cvss 5.5epss 0.01
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.
- risk 0.36cvss 5.5epss 0.01
A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found.
- risk 0.64cvss 9.8epss 0.08
A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i (NNMi) Software versions v10.0x, v10.1x, v10.2x was found.
- risk 0.66cvss 9.8epss 0.30
A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found.
- risk 0.55cvss 8.3epss 0.11
A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0 and 1.0.1 was found.
- risk 0.40cvss 6.1epss 0.02
A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Federation Agent version 3.0 was found.
- risk 0.49cvss 7.5epss 0.06
A Remote Disclosure of Information vulnerability in HPE Cloud Optimizer version v3.0x was found.
- risk 0.51cvss 7.8epss 0.01
An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
- risk 0.53cvss 8.1epss 0.02
An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
- risk 0.35cvss 5.4epss 0.01
A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
- risk 0.57cvss 8.8epss 0.03
An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
- risk 0.57cvss 8.8epss 0.02
A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.
- risk 0.65cvss 9.8epss 0.19
An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.