Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tant web interface from all untrusted users. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.1 Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-001.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-549547.pdf - http://www.securityfocus.com/bid/108374
CVE ID: CVE-2018-7085 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2018-7086 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2018-7087 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2018-7088 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2018-7089 State: REJECTED Published: 2020-08-17T14:10:15 Last Updated: 2020-08-17T14:10:15 Description: No description available.
CVE ID: CVE-2018-7090 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.355Z Vendors: Hewlett Packard Enterprise Products: HPE XP P9000 Command View Advanced Edition Software (CVAE) versions 7.0.0-00 to earlier than 8.60-00 Problem Types: cross site scripting (XSS) Description: HPE XP P9000 Command View Advanced Edition Software (CVAE) has local and remote cross site scripting vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03859en_us
CVE ID: CVE-2018-7091 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.467Z Vendors: Hewlett Packard Enterprise Products: HPE XP P9000 Command View Advanced Edition Software (CVAE) Problem Types: open redirect Description: HPE XP P9000 Command View Advanced Edition Software (CVAE) has open URL redirection vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03859en_us
CVE ID: CVE-2018-7092 State: PUBLISHED Published: 2018-08-06T20:00:00 Last Updated: 2024-08-05T06:17:17.390Z Vendors: Hewlett Packard Enterprise Products: HPE Intelligent Management Center Platform (IMC Plat) Problem Types: remote directory traversal leading to arbitrary file deletion Description: A potential security vulnerability has been identified in HPE Intelligent Management Center Platform (IMC Plat) 7.3 E0506P09. The vulnerability could be remotely exploited to allow for remote directory traversal leading to arbitrary file deletion. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041412 - https://support.hpe.com/hpsc/doc/public/disp
rogram Container: References: - http://www.securitytracker.com/id/1041412 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03872en_us
CVE ID: CVE-2018-7093 State: PUBLISHED Published: 2018-08-14T14:00:00 Last Updated: 2024-08-05T06:17:17.590Z Vendors: Hewlett Packard Enterprise Products: iLO 5 for HPE Gen10 Servers, iLO 4, iLO 3, Moonshot Chassis Management Firmware, Moonshot Component Packs for HPE ProLiant m510 and m710x server cartridges Problem Types: remote denial of service Description: A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to v1.58, and Moonshot Component Pack prior to v2.55 could be remotely exploited to create a denial of service. Additional Analyst Notes: - CVE Program Container: References: - htt
e remotely exploited to create a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041435 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us
CVE ID: CVE-2018-7094 State: PUBLISHED Published: 2018-08-14T14:00:00 Last Updated: 2024-08-05T06:17:17.465Z Vendors: Hewlett Packard Enterprise Products: HPE 3PAR Service Processors Problem Types: Local Disclosure of Privileged Information Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA). The vulnerability may be exploited locally to allow disclosure of privileged information. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03870en_us
CVE ID: CVE-2018-7095 State: PUBLISHED Published: 2018-08-14T14:00:00 Last Updated: 2024-08-05T06:17:17.457Z Vendors: Hewlett Packard Enterprise Products: HPE 3PAR Service Processors Problem Types: remote access restriction bypass Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow access restriction bypass. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
CVE ID: CVE-2018-7096 State: PUBLISHED Published: 2018-08-14T14:00:00 Last Updated: 2024-08-05T06:17:17.425Z Vendors: Hewlett Packard Enterprise Products: HPE 3PAR Service Processors Problem Types: remote code execution Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
CVE ID: CVE-2018-7097 State: PUBLISHED Published: 2018-08-14T14:00:00 Last Updated: 2024-08-05T06:17:17.379Z Vendors: Hewlett Packard Enterprise Products: HPE 3PAR Service Processors Problem Types: cross-site request forgery Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
CVE ID: CVE-2018-7098 State: PUBLISHED Published: 2018-08-14T14:00:00 Last Updated: 2024-08-05T06:17:17.466Z Vendors: Hewlett Packard Enterprise Products: HPE 3PAR Service Processors Problem Types: local directory traversal Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
CVE ID: CVE-2018-7099 State: PUBLISHED Published: 2018-08-14T14:00:00 Last Updated: 2024-08-05T06:17:17.461Z Vendors: Hewlett Packard Enterprise Products: HPE 3PAR Service Processors Problem Types: local disclosure of privileged information Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow disclosure of privileged information. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_
=emr_na-hpesbst03884en_us - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
CVE ID: CVE-2018-7100 State: PUBLISHED Published: 2018-08-14T14:00:00 Last Updated: 2024-08-05T06:17:17.460Z Vendors: Hewlett Packard Enterprise Products: HP 1810-24G, HP 1810-48G, HP 1810-8 v2 Switches Problem Types: local disclosure of sensitive information Description: A potential security vulnerability has been identified in HPE OfficeConnect 1810 Switch Series (HP 1810-24G - P.2.22 and previous versions, HP 1810-48G PK.1.34 and previous versions, HP 1810-8 v2 P.2.22 and previous versions). The vulnerability could allow local disclosure of sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_U
nal Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03858en_us - http://www.securitytracker.com/id/1041445
CVE ID: CVE-2018-7101 State: PUBLISHED Published: 2018-09-27T18:00:00 Last Updated: 2024-08-05T06:17:17.501Z Vendors: Hewlett Packard Enterprise Products: HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers, HPE Integrated Lights-Out 4 (iLO 4) Problem Types: remote denial of service Description: A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041488 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03875en_us
CVE ID: CVE-2018-7102 State: PUBLISHED Published: 2018-09-27T18:00:00 Last Updated: 2024-08-05T06:17:17.555Z Vendors: Hewlett Packard Enterprise Products: HPE Intelligent Management Center (iMC) PLAT Problem Types: Remote Arbitrary File Modification Description: A security vulnerability in HPE Intelligent Management Center (iMC) PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03887en_us
CVE ID: CVE-2018-7103 State: PUBLISHED Published: 2018-09-27T18:00:00 Last Updated: 2024-08-05T06:17:17.419Z Vendors: Hewlett Packard Enterprise Products: HPE Intelligent Management Center (iMC) Wireless Services Manager Software Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03893en_us
CVE ID: CVE-2018-7104 State: PUBLISHED Published: 2018-09-27T18:00:00 Last Updated: 2024-08-05T06:17:17.411Z Vendors: Hewlett Packard Enterprise Products: HPE Intelligent Management Center (iMC) Wireless Services Manager Software Problem Types: Remote Code Execution Description: A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03893en_us
CVE ID: CVE-2018-7105 State: PUBLISHED Published: 2018-09-27T18:00:00 Last Updated: 2024-08-05T06:17:17.562Z Vendors: Hewlett Packard Enterprise Products: HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers, HPE Integrated Lights-Out 4 (iLO 4), HPE Integrated Lights-Out 3 (iLO 3) Problem Types: remote execution of arbitrary code Description: A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information. Additional Analyst Notes: - CVE Program Container: Re
ed to execute arbitrary code leading to disclosure of information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105425 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03866en_us - http://www.securitytracker.com/id/1041649
CVE ID: CVE-2018-7106 State: REJECTED Published: 2018-09-27T18:00:00 Last Updated: 2018-10-17T17:57:01 Description: No description available.
CVE ID: CVE-2018-7107 State: PUBLISHED Published: 2018-09-27T18:00:00 Last Updated: 2024-08-05T06:17:17.459Z Vendors: Hewlett Packard Enterprise Products: HPE Device Entitlement Gateway (DEG) Problem Types: Remote SQL Injection and Elevation of Privileges Description: A potential security vulnerability has been identified in HPE Device Entitlement Gateway (DEG) v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03889en_us
CVE ID: CVE-2018-7108 State: PUBLISHED Published: 2018-09-27T18:00:00 Last Updated: 2024-08-05T06:17:17.462Z Vendors: Hewlett Packard Enterprise Products: HPE StorageWorks XP7 Automation Director (AutoDir) Problem Types: Local and Remote Authentication Bypass Description: HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vulnerability that exposed the user authentication information of the storage system. This problem sometimes occurred under specific conditions when running a service template. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display
mplate. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03879en_us - http://www.securitytracker.com/id/1041696
CVE ID: CVE-2018-7109 State: PUBLISHED Published: 2018-09-27T18:00:00 Last Updated: 2024-08-05T06:17:17.409Z Vendors: Hewlett Packard Enterprise Products: HPE enhanced Internet Usage Manager (eIUM) Problem Types: Remote Arbitrary File Modification Description: HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager (eIUM) v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105422 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03896en_us
CVE ID: CVE-2018-7110 State: PUBLISHED Published: 2018-10-17T13:00:00Z Last Updated: 2024-09-16T17:33:04.715Z Vendors: Hewlett Packard Enterprise Products: HPE Service Governance Framework (SGF) Problem Types: remote unauthorized disclosure of information Description: A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework (SGF) version 4.2, 4.3. A race condition under high load in SGF exists where SGF transferred different parameter to the enabler. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03890en_us
CVE ID: CVE-2018-7111 State: PUBLISHED Published: 2018-10-17T13:00:00Z Last Updated: 2024-09-17T00:11:22.584Z Vendors: Hewlett Packard Enterprise Products: HPE UIoT Problem Types: remote unauthorized access Description: A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03891en_us - http://www.securityfocus.
tps://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03891en_us - http://www.securityfocus.com/bid/105704
CVE ID: CVE-2018-7112 State: PUBLISHED Published: 2018-12-03T15:00:00 Last Updated: 2024-08-05T06:17:17.526Z Vendors: Hewlett Packard Enterprise Products: Windows firmware installer for Gen9, Gen8, G7,and G6 HPE servers Problem Types: local disclosure of privileged information Description: The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which also addressed the original Spectre/Meltdown set of vulnerabilities. At that time, the Windows firmware installer
which also addressed the original Spectre/Meltdown set of vulnerabilities. At that time, the Windows firmware installer was also updated in the versions of HPE Integrated Lights-Out 2, 3, and 4 (iLO 2, 3, and 4) listed in the security bulletin. The updated HPE Windows firmware installer was released in the system ROM and HPE Integrated Lights-Out (iLO) releases documented in earlier HPE Security Bulletins: HPESBHF03805, HPESBHF03835, HPESBHF03831. Windows-based systems that have already been updated to the system ROM or iLO versions described in these security bulletins require no further action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com
quire no further action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041984 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03869en_us
CVE ID: CVE-2018-7113 State: PUBLISHED Published: 2018-12-03T15:00:00 Last Updated: 2024-08-05T06:17:17.569Z Vendors: Hewlett Packard Enterprise Products: HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: local bypass of security restrictions Description: A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the security restrictions for firmware updates. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042010 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03894en_us
CVE ID: CVE-2018-7114 State: PUBLISHED Published: 2018-12-03T15:00:00 Last Updated: 2024-08-05T06:17:17.502Z Vendors: Hewlett Packard Enterprise Products: HPE Intelligent Management Center (IMC) Problem Types: remote code execution Description: HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042182 - http://www.securityfocus.com/bid/106211 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hp
ttp://www.securityfocus.com/bid/106211 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03906en_us - https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03906en_us
CVE ID: CVE-2018-7115 State: PUBLISHED Published: 2018-12-03T15:00:00 Last Updated: 2024-08-05T06:17:17.525Z Vendors: Hewlett Packard Enterprise Products: HPE Intelligent Management Center (IMC) Problem Types: remote buffer overflow Description: HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in dbman.exe opcode 10001 on Windows. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042182 - http://www.securityfocus.com/bid/106211 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_
2 - http://www.securityfocus.com/bid/106211 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03906en_us - https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03906en_us
CVE ID: CVE-2018-7116 State: PUBLISHED Published: 2018-12-03T15:00:00 Last Updated: 2024-08-05T06:17:17.600Z Vendors: Hewlett Packard Enterprise Products: HPE Intelligent Management Center (IMC) Problem Types: remote denial of service Description: HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042182 - http://www.securityfocus.com/bid/106211 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr
82 - http://www.securityfocus.com/bid/106211 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03906en_us - https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03906en_us
CVE ID: CVE-2018-7117 State: PUBLISHED Published: 2019-04-09T18:28:18 Last Updated: 2024-08-05T06:17:17.554Z Vendors: n/a Products: HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers Problem Types: remote cross-site scripting Description: A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant Servers earlier than version v1.40. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03907en_us - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03917en_us
CVE ID: CVE-2018-7118 State: PUBLISHED Published: 2019-04-09T18:28:13 Last Updated: 2024-08-05T06:17:17.563Z Vendors: n/a Products: HPE Service Pack for Proliant (HPE SPP) Problem Types: local access restriction bypass Description: A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software earlier than version 2018.09.0. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03904en_us
CVE ID: CVE-2018-7119 State: PUBLISHED Published: 2019-05-10T18:21:24 Last Updated: 2024-08-05T06:17:17.502Z Vendors: HPE Products: NonStop SAFEGAURD and NonStop H-series STDSEC-STANDARD SECURITY Product Problem Types: Local Disclosure of Sensitive Information Description: A Local Disclosure of Sensitive Information vulnerability was identified in HPE NonStop Safeguard earlier than version SPR T9750L01^AIC or T9750H05^AIH, and later versions when the PASSWORD-PROMPT configuration attribute is not set to BLIND; all versions on H-series. STDSEC-STANDARD SECURITY PROD All prior versions before T6533L01^ADU or T6533H05^ADW, and later versions when the PASSWORD-PROMPT configuration attribute is n
r versions before T6533L01^ADU or T6533H05^ADW, and later versions when the PASSWORD-PROMPT configuration attribute is not set to BLIND and all versions on H-series . Note that some commands in NonStop Safeguard and NonStop Standard Security software require username and password to be passed as command line parameters, which may lead to a local disclosure of the credentials. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03910en_us