Known vulnerabilities in HPE Unified OSS Console (UOC)

Vendor: Hewlett Packard Enterprise Development LP
Software: HPE Unified OSS Console (UOC)
Software CPE: cpe:2.3:a:hewlett_packard_enterprise_development_lp:hpe_unified_oss_console_uoc:*:*:*:*:*:*:*:*
Website: https://www.hpe.com/us/en/home.html
Total vulnerabilities: 28
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HPE Unified OSS Console (UOC) HPE Unified OSS Console (UOC) is affected by 28 known vulnerabilities: 3 high, 18 medium, 7 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102577 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-37629		 CWE-79 Low
No
No
 3.1.12 13.01.2025 SB2023092036
SB2025011369
#VU101895 - Inefficient Regular Expression Complexity
CVE-2024-52798		 CWE-1333 Low
No
No
 3.1.13 23.12.2024 SB2024122305
SB2024122309
SB2025011306
and 45 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337		 CWE-264 High
No
No
 3.1.13 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379		 CWE-264 Medium
Available
No
 3.1.13 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU101813 - Resource exhaustion
CVE-2024-54677		 CWE-400 Medium
No
No
 3.1.13 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 13 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 3.1.12 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU98760 - Improper input validation
CVE-2024-47764		 CWE-20 Low
No
No
 3.1.12 17.10.2024 SB2024101722
SB20241022349
SB2024103080
and 35 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 3.1.12 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU97244 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-38999		 CWE-1321 High
No
No
 3.1.8 13.09.2024 SB2024091339
SB2024091626
SB20241015165
and 13 more
#VU96019 - Resource exhaustion
CVE-2024-38808		 CWE-400 Medium
No
No
 3.1.12 14.08.2024 SB2024081480
SB2024092018
SB2024100315
and 24 more
#VU96018 - Improper input validation
CVE-2024-38809		 CWE-20 Medium
No
No
 3.1.12 14.08.2024 SB2024081479
SB2024091920
SB2024100804
and 26 more
#VU94329 - NULL Pointer Dereference
CVE-2024-37890		 CWE-476 Medium
No
No
 3.1.8 15.07.2024 SB2024071508
SB2024071933
SB2024081608
and 32 more
#VU92307 - Use After Free
CVE-2024-38555		 CWE-416 Low
No
No
 3.1.8 20.06.2024 SB2024062027
SB2024070206
SB2024070724
and 45 more
#VU87570 - Improper Access Control
CVE-2024-23944		 CWE-284 Low
No
No
 3.1.12 15.03.2024 SB2024031533
SB2024052921
SB2024061902
and 23 more
#VU87188 - Inefficient Regular Expression Complexity
CVE-2022-25844		 CWE-1333 Medium
No
No
 3.1.8 07.03.2024 SB2024030721
SB2024040929
SB2024042411
and 10 more
#VU81703 - Inefficient Regular Expression Complexity
CVE-2023-26116		 CWE-1333 Medium
No
No
 3.1.8 09.10.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU81699 - Inefficient Regular Expression Complexity
CVE-2023-26118		 CWE-1333 Medium
No
No
 3.1.8 09.10.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU79318 - Inefficient Regular Expression Complexity
CVE-2023-26117		 CWE-1333 Medium
No
No
 3.1.8 10.08.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU78488 - Uncaught Exception
CVE-2023-32695		 CWE-248 Medium
No
No
 3.1.8 21.07.2023 SB2023072118
SB2023092226
SB2024010967
and 4 more
#VU29032 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7676		 CWE-79 Low
No
No
 3.1.8 16.06.2020 SB2020061604
SB2021072628
SB2021072629
and 19 more


Showing elements 1 - 20 out of 28