HP 3par Service Provider vulnerabilities

5 CVEs affecting HP 3par Service Provider, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7099, published 2018-08-14.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-7096, published 2018-08-14. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow code execution.
• CVE-2018-7095, published 2018-08-14. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow access restriction bypass.
• CVE-2018-7097, published 2018-08-14. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery.
• CVE-2018-7098, published 2018-08-14. High severity, CVSS 8.4. EPSS: 0.7% chance of exploitation in the next 30 days. A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow directory traversal.
• CVE-2018-7099, published 2018-08-14. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow disclosure of privileged information.