Known vulnerabilities in 3PAR Service Processors
Vendor:
HPE
Software:
3PAR Service Processors
Software CPE:
cpe:2.3:a:hpe:3par_service_processors:*:*:*:*:*:*:*:*
Website:
https://www.hpe.com
Total vulnerabilities:
10
Public exploits:
6
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU96724 - Improper Authentication CVE-2024-22442 |
CWE-287 | High | 5.1.2 | 03.09.2024 |
SB2024090349 |
||
| #VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832 |
CWE-94 | Medium | 5.0.9.2 | 28.12.2021 |
SB2021122816 SB2021123002 SB2022010601 and 197 more |
||
| #VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105 |
CWE-835 | Medium | 5.0.9.2 | 18.12.2021 |
SB2021121802 SB2021121903 SB2021122011 and 169 more |
||
| #VU58977 - Deserialization of Untrusted Data CVE-2021-4104 |
CWE-502 | Medium | 5.0.9.2 | 15.12.2021 |
SB2021121507 SB2021121647 SB2021121720 and 119 more |
||
| #VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046 |
CWE-94 | High | 5.0.9.2 | 15.12.2021 |
SB2021121504 SB2021121511 SB2021121512 and 178 more |
||
| #VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228 |
CWE-94 | Critical | 5.0.9.2 | 10.12.2021 |
SB2021121003 SB2021121101 SB2021121201 and 338 more |
||
| #VU5295 - Command injection CVE-2014-6271 |
CWE-77 | Critical | 4.1.0.GA-97.P011, 4.2.0.GA-29.P003, 4.3.0.GA-17.P001 | 24.01.2017 |
SB2014091201 SB2015092401 SB2015092613 and 46 more |
||
| #VU5294 - Command injection CVE-2014-7169 |
CWE-77 | Critical | 4.1.0.GA-97.P011, 4.2.0.GA-29.P003, 4.3.0.GA-17.P001 | 24.01.2017 |
SB2014091201 SB2015092501 SB2015092502 and 37 more |
||
| #VU5214 - Use of a Broken or Risky Cryptographic Algorithm CVE-2014-3566 |
CWE-327 | Medium | 4.1.0.GA-97.P011, 4.2.0.GA-29.P003, 4.3.0.GA-17.P001 | 20.01.2017 |
SB2014101601 SB2014102102 SB2016022401 and 78 more |
||
| #VU2950 - Cryptographic Issues CVE-2014-0224 |
CWE-310 | Medium | 4.1.0.GA-97.P011, 4.2.0.GA-29.P003, 4.3.0.GA-17.P001 | 30.11.-0001 |
SB2014060501 SB2014060502 SB2014060503 and 42 more |