CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 07/09/2023 |
| CVE-2023-28084 | MEDIO5.5 | HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens | 25/04/2023 |
| CVE-2023-28090 | MEDIO5.5 | An HPE OneView appliance dump may expose SNMPv3 read credentials | 25/04/2023 |
| CVE-2023-28089 | ALTO7.1 | An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules | 25/04/2023 |
| CVE-2023-28088 | ALTO7.8 | An HPE OneView appliance dump may expose SAN switch administrative credentials | 25/04/2023 |
| CVE-2023-28087 | MEDIO5.5 | An HPE OneView appliance dump may expose OneView user accounts | 25/04/2023 |
| CVE-2023-28086 | MEDIO5.5 | An HPE OneView appliance dump may expose proxy credential settings | 25/04/2023 |
| CVE-2023-28091 | MEDIO5.5 | HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump | 14/04/2023 |
| CVE-2022-28625 | MEDIO5.5 | A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability. To exploit this vuln | 31/08/2022 |
| CVE-2022-28616 | CRITICO9.8 | A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView. | 17/05/2022 |
| CVE-2022-28617 | CRITICO9.8 | A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView. | 17/05/2022 |
| CVE-2022-23706 | MEDIO6.1 | A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView. | 17/05/2022 |
| CVE-2022-23700 | MEDIO5.5 | A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView. | 04/04/2022 |
| CVE-2022-23699 | ALTO7.8 | A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView. | 04/04/2022 |
| CVE-2022-23698 | ALTO7.5 | A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView. | 04/04/2022 |
| CVE-2022-23697 | MEDIO6.1 | A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView. | 04/04/2022 |