CVSS: 9.7EPSS: 0%CPEs: 2EXPL: 0CVE-2019-5396
https://notcve.org/view.php?id=CVE-2019-5396
A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. Se detectó una vulnerabilidad de omisión de autenticación remota en HPE 3PAR Service Processor versión(es): anteriores a 5.0.5.1. • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03942en_us •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2019-5395
https://notcve.org/view.php?id=CVE-2019-5395
A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. Se detectó una vulnerabilidad de carga de archivos arbitraria remota en HPE 3PAR Service Processor versión(es): anteriores a 5.0.5.1. • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03942en_us • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 0CVE-2019-11991
https://notcve.org/view.php?id=CVE-2019-11991
HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service Processor and any managed 3PAR arrays. HPE ha identificado una vulnerabilidad en HPE 3PAR Service Processor (SP) versión 4.1 hasta 4.4. HPE 3PAR Service Processor (SP) versión 4.1 hasta 4.4 presenta una vulnerabilidad de divulgación de información remota que puede permitir la ruptura de la confidencialidad, integridad y disponibilidad del procesador de servicios y cualquier matriz 3PAR administrada. • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03918en_us • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.0EPSS: 0%CPEs: 3EXPL: 0CVE-2015-5443
https://notcve.org/view.php?id=CVE-2015-5443
HP 3PAR Service Processor SP 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC, and SP 4.3.0-GA-24 (MU1) SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors. HP 3PAR Service Processor SPA 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC y SP 4.3.0-GA-24 (MU1) SPOCC permite a usuarios remotos autenticados obtener información sensible a través de vectores no especificados. • https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04822249 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •