HP 3par Service Processor Firmware vulnerabilities
8 CVEs affecting HP 3par Service Processor Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-22442, published 2024-07-16.
More from HP.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2019-5396, published 2019-08-09. Critical severity, CVSS 9.4. EPSS: 5.1% chance of exploitation in the next 30 days. A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
- CVE-2019-11991, published 2019-07-09. Critical severity, CVSS 9.8. EPSS: 4.7% chance of exploitation in the next 30 days. HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 through 4.4 has a remote information disclosure…
- CVE-2019-5397, published 2019-08-09. Critical severity, CVSS 9.4. EPSS: 4.3% chance of exploitation in the next 30 days. A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
- CVE-2019-5399, published 2019-08-09. Critical severity, CVSS 9.4. EPSS: 2.4% chance of exploitation in the next 30 days. A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
- CVE-2019-5395, published 2019-08-09. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
- CVE-2019-5400, published 2019-08-09. Medium severity, CVSS 6.3. EPSS: 0.9% chance of exploitation in the next 30 days. A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
- CVE-2019-5398, published 2019-08-09. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1.
- CVE-2024-22442, published 2024-07-16. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. The vulnerability could be remotely exploited to bypass authentication.