Hp 3Par Service Processor Firmware vulnerabilities
8 known vulnerabilities affecting hp/3par_service_processor_firmware.
Total CVEs
8
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL5HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2019-5396P2CRITICALCVSS 9.4fixed in 5.0.5.12019-08-09
CVE-2019-5396 [CRITICAL] CVE-2019-5396: A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s)
A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
nvd
CVE-2024-22442P2CRITICALCVSS 9.8fixed in 5.1.2.02024-07-16
CVE-2024-22442 [CRITICAL] CWE-287 CVE-2024-22442: The vulnerability could be remotely exploited to bypass authentication.
The vulnerability could be remotely exploited to bypass authentication.
nvd
CVE-2019-5399P3CRITICALCVSS 9.4fixed in 5.0.5.12019-08-09
CVE-2019-5399 [CRITICAL] CVE-2019-5399: A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s
A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
nvd
CVE-2019-5397P3CRITICALCVSS 9.4fixed in 5.0.5.12019-08-09
CVE-2019-5397 [CRITICAL] CWE-79 CVE-2019-5397: A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor
A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
nvd
CVE-2019-5395P3HIGHCVSS 8.8fixed in 5.0.5.12019-08-09
CVE-2019-5395 [HIGH] CWE-434 CVE-2019-5395: A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s)
A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
nvd
CVE-2019-11991P3CRITICALCVSS 9.8≥ 4.1, ≤ 4.42019-07-09
CVE-2019-11991 [CRITICAL] CWE-200 CVE-2019-11991: HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3
HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service Processor and any managed 3PAR arrays.
nvd
CVE-2019-5400P4MEDIUMCVSS 6.3fixed in 5.0.5.12019-08-09
CVE-2019-5400 [MEDIUM] CWE-384 CVE-2019-5400: A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior
A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
nvd
CVE-2019-5398P4MEDIUMCVSS 5.4fixed in 5.0.5.12019-08-09
CVE-2019-5398 [MEDIUM] CWE-79 CVE-2019-5398: A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor ver
A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
nvd