ON
Product
Oneview
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 7Medium 10Low 0
Watch
Add Oneview to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-30909 | 9.8 | Sep 14 | A remote authentication bypass issue exists in some OneView APIs Affected: before 8.30.01 |
| CVE-2023-30908 | 9.8 | Sep 7 | A remote authentication bypass issue exists in a OneView API Affected: before 6.60.05; 7.0 before 8.5 |
| CVE-2022-28616 | 9.8 | May 17 | A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0 Affected: before 7.0 |
| CVE-2022-28617 | 9.8 | May 17 | A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0 Affected: before 7.0 |
| CVE-2020-7198 | 8.8 | Nov 6 | There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer Affected: 5.0; 5.00.01; 5.00.02; 5.2; 5.3; 5.4; +1 more |
| CVE-2023-50274 | 7.8 | Jan 23 | HPE OneView may allow command injection with local privilege escalation Affected: before 8.70 |
| CVE-2023-28088 | 7.8 | Apr 25 | An HPE OneView appliance dump may expose SAN switch administrative credentials Affected: before 6.60.04; before 8.2 |
| CVE-2022-23699 | 7.8 | Apr 4 | A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6 Affected: before 6.6 |
| CVE-2023-50275 | 7.5 | Jan 23 | HPE OneView may allow clusterService Authentication Bypass resulting in denial of service Affected: before 8.70 |
| CVE-2022-23698 | 7.5 | Apr 4 | A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6 Affected: before 6.6 |
| CVE-2023-28089 | 7.1 | Apr 25 | An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules Affected: before 6.60.04; before 8.2 |
| CVE-2022-23706 | 6.1 | May 17 | A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0 Affected: before 7.0 |
| CVE-2022-23697 | 6.1 | Apr 4 | A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6 Affected: before 6.6 |
| CVE-2023-6573 | 5.5 | Jan 23 | HPE OneView may have a missing passphrase during restore Affected: before 8.70 |
| CVE-2023-28084 | 5.5 | Apr 25 | HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens Affected: before 6.60.04; 7.0 before 8.2 |
| CVE-2023-28090 | 5.5 | Apr 25 | An HPE OneView appliance dump may expose SNMPv3 read credentials Affected: before 6.60.04; before 8.2 |
| CVE-2023-28087 | 5.5 | Apr 25 | An HPE OneView appliance dump may expose OneView user accounts Affected: before 6.60.04; before 8.2 |
| CVE-2023-28086 | 5.5 | Apr 25 | An HPE OneView appliance dump may expose proxy credential settings Affected: before 6.60.04; before 8.2 |
| CVE-2023-28091 | 5.5 | Apr 14 | HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump Affected: 7.0 through 8.1 |
| CVE-2022-28625 | 5.5 | Aug 31 | A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01 Affected: before 6.60.01 |
| CVE-2022-23700 | 5.5 | Apr 4 | A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6 Affected: before 6.6 |
| CVE-2014-2602 | – | May 8 | Unspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to gain privileges via unknown vectors Affected: 1.0; 1.01 |
Showing 22