Hp

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-4394 1Hp 1System Management Homepage May 6, 2026 Oct 28, 2016 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue.
CVE-2016-4393 1Hp 1System Management Homepage May 6, 2026 Oct 28, 2016 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue.
CVE-2016-4390 1Hp 1Keyview May 6, 2026 Oct 5, 2016 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4389.
CVE-2016-4389 1Hp 1Keyview May 6, 2026 Oct 5, 2016 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4390.
CVE-2016-4388 1Hp 1Keyview May 6, 2026 Oct 5, 2016 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4389, and CVE-2016-4390.
CVE-2016-4387 1Hp 1Keyview May 6, 2026 Oct 5, 2016 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4388, CVE-2016-4389, and CVE-2016-4390.
CVE-2016-4386 1Hp 1Network Automation May 6, 2026 Sep 29, 2016 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.
CVE-2016-4385 1Hp 1Network Automation May 6, 2026 Sep 29, 2016 N/A· v4 7.3 HIGH· v3 7.5 HIGH· v2 The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to...Show more The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.Show less
CVE-2016-2776 3Hp IscOracle 5Bind Hp UxLinux+2 more May 6, 2026 Sep 28, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure a...Show more buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.Show less
CVE-2016-6306 6Canonical DebianHp+3 more 9Debian Linux Icewall Federation AgentIcewall Mcrp+6 more May 6, 2026 Sep 26, 2016 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr....Show more The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.Show less
CVE-2016-4384 1Hp 2Loadrunner Performance Center May 6, 2026 Sep 21, 2016 N/A· v4 8.6 HIGH· v3 9.0 HIGH· v2 HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors.
CVE-2016-4382 1Hp 1Performance Center May 6, 2026 Sep 21, 2016 N/A· v4 8.3 HIGH· v3 6.0 MEDIUM· v2 HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to a "remote user validation failure" issue.
CVE-2016-2182 3Hp OpensslOracle 6Icewall Federation Agent Icewall McrpIcewall Sso+3 more May 6, 2026 Sep 16, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) o...Show more The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.Show less
CVE-2016-4381 1Hp 1Xp7 Command View May 6, 2026 Sep 8, 2016 N/A· v4 4.5 MEDIUM· v3 4.4 MEDIUM· v2 HPE XP7 Command View Advanced Edition (CVAE) Suite 6.x through 8.x before 8.4.1-02, when Replication Manager (RepMgr) and Device Manager (DevMgr) are enabled, allows local users to bypass intended access restrictions via...Show more HPE XP7 Command View Advanced Edition (CVAE) Suite 6.x through 8.x before 8.4.1-02, when Replication Manager (RepMgr) and Device Manager (DevMgr) are enabled, allows local users to bypass intended access restrictions via unspecified vectors.Show less
CVE-2016-4380 1Hp 1Operations Manager May 6, 2026 Sep 8, 2016 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-4379 1Hp 1Integrated Lights Out 3 Firmware May 6, 2026 Sep 8, 2016 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 The TLS implementation in HPE Integrated Lights-Out 3 (aka iLO3) firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive in...Show more The TLS implementation in HPE Integrated Lights-Out 3 (aka iLO3) firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack.Show less
CVE-2016-4375 1Hp 3Integrated Lights Out 3 Firmware Integrated Lights Out 4 FirmwareIntegrated Lights Out 4 Mrca Firmware May 6, 2026 Sep 8, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated Lights-Out 4 (aka iLO 4) mRCA firmware before...Show more Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1.88, Integrated Lights-Out 4 (aka iLO 4) firmware before 2.44, and Integrated Lights-Out 4 (aka iLO 4) mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.Show less
CVE-2016-4378 1Hp 2Xp7 Command View Xp 9000 Command View May 6, 2026 Aug 26, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The (1) Device Manager, (2) Tiered Storage Manager, (3) Replication Manager, (4) Replication Monitor, and (5) Hitachi Automation Director (HAD) components in HPE XP P9000 Command View Advanced Edition Software before 8.4...Show more The (1) Device Manager, (2) Tiered Storage Manager, (3) Replication Manager, (4) Replication Monitor, and (5) Hitachi Automation Director (HAD) components in HPE XP P9000 Command View Advanced Edition Software before 8.4.1-00 and XP7 Command View Advanced Edition Suite before 8.4.1-00 allow remote attackers to obtain sensitive information via unspecified vectors.Show less
CVE-2016-4377 1Hp 15Converged Infrastructure Solution Sizer Suite Insight Management SizerPower Advisor+12 more May 6, 2026 Aug 22, 2016 N/A· v4 8.1 HIGH· v3 7.6 HIGH· v2 HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite (CISSS) before 2.13.1, Power Advisor before 7.8.2, Insight Management Sizer before 16.12.1, Synergy Planning Tool before...Show more HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite (CISSS) before 2.13.1, Power Advisor before 7.8.2, Insight Management Sizer before 16.12.1, Synergy Planning Tool before 3.3, SAP Sizing Tool before 16.12.1, Sizing Tool for SAP Business Suite powered by HANA before 16.11.1, Sizer for ConvergedSystems Virtualization before 16.7.1, Sizer for Microsoft Exchange Server before 16.12.1, Sizer for Microsoft Lync Server 2013 before 16.12.1, Sizer for Microsoft SharePoint 2013 before 16.13.1, Sizer for Microsoft SharePoint 2010 before 16.11.1, and Sizer for Microsoft Skype for Business Server 2015 before 16.5.1 allows remote attackers to execute arbitrary code via unspecified vectors.Show less
CVE-2016-4374 1Hp 1Release Control May 6, 2026 Aug 8, 2016 N/A· v4 7.7 HIGH· v3 4.0 MEDIUM· v2 HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information or cause a denial o...Show more HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information or cause a denial of service, via unspecified vectors.Show less

Previous 1...474849...117 Next