
CVE-2024-22442
https://notcve.org/view.php?id=CVE-2024-22442
16 Jul 2024 — The vulnerability could be remotely exploited to bypass authentication. • https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04663en_us&docLocale=en_US • CWE-287: Improper Authentication •

CVE-2021-46846
https://notcve.org/view.php?id=CVE-2021-46846
03 Nov 2022 — Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5. Vulnerabilidad de Cross-Site Scripting en Hewlett Packard Enterprise Integrated Lights-Out 5. • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04133en_us • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVE-2019-5400
https://notcve.org/view.php?id=CVE-2019-5400
09 Aug 2019 — A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. Se detectó una vulnerabilidad de reutilización de sesión remota en HPE 3PAR Service Processor versión(es): anteriores a 5.0.5.1. • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03942en_us • CWE-384: Session Fixation •

CVE-2019-5399
https://notcve.org/view.php?id=CVE-2019-5399
09 Aug 2019 — A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. Se detectó una vulnerabilidad de obtención de acceso autorizado remota en HPE 3PAR Service Processor versión(es): anteriores a 5.0.5.1. • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03942en_us •

CVE-2019-5398
https://notcve.org/view.php?id=CVE-2019-5398
09 Aug 2019 — A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. Se detectó una vulnerabilidad de tipo cross-site múltiple remota en HPE 3PAR Service Processor versión(es): anteriores a 5.0.5.1. • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03942en_us • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVE-2019-5397
https://notcve.org/view.php?id=CVE-2019-5397
09 Aug 2019 — A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. Se detectó una vulnerabilidad de omisión de las restricciones de seguridad remota en HPE 3PAR Service Processor versión(es): anteriores a 5.0.5.1. • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03942en_us • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVE-2019-5396
https://notcve.org/view.php?id=CVE-2019-5396
09 Aug 2019 — A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. Se detectó una vulnerabilidad de omisión de autenticación remota en HPE 3PAR Service Processor versión(es): anteriores a 5.0.5.1. • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03942en_us •

CVE-2019-5395
https://notcve.org/view.php?id=CVE-2019-5395
09 Aug 2019 — A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. Se detectó una vulnerabilidad de carga de archivos arbitraria remota en HPE 3PAR Service Processor versión(es): anteriores a 5.0.5.1. • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03942en_us • CWE-434: Unrestricted Upload of File with Dangerous Type •

CVE-2019-11991
https://notcve.org/view.php?id=CVE-2019-11991
09 Jul 2019 — HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service Processor and any managed 3PAR arrays. HPE ha identificado una vulnerabilidad en HPE 3PAR Service Processor (SP) versión 4.1 hasta 4.4. HPE 3PAR Service Processor (SP) versión 4.1 hasta 4.4 presenta una vulnera... • https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03918en_us • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVE-2015-5443 – HP Security Bulletin HPSBST03502 1
https://notcve.org/view.php?id=CVE-2015-5443
01 Oct 2015 — HP 3PAR Service Processor SP 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC, and SP 4.3.0-GA-24 (MU1) SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors. HP 3PAR Service Processor SPA 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC y SP 4.3.0-GA-24 (MU1) SPOCC permite a usuarios remotos autenticados obtener información sensible a través de vectores no especificados. A potential security vulnerability has been identified in HP 3PAR Service Processor (SP) SPOC... • https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04822249 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •