HP 3par Storeserv Management Console vulnerabilities

6 CVEs affecting HP 3par Storeserv Management Console, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5407, published 2019-08-09.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-5402, published 2019-08-09. Critical severity, CVSS 9.4. EPSS: 4.3% chance of exploitation in the next 30 days. A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.
• CVE-2019-5404, published 2019-08-09. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.
• CVE-2019-5405, published 2019-08-09. High severity, CVSS 7.3. EPSS: 1.6% chance of exploitation in the next 30 days. A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.
• CVE-2019-5406, published 2019-08-09. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. A remote session reuse vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.
• CVE-2019-5407, published 2019-08-09. Medium severity, CVSS 6.3. EPSS: 1% chance of exploitation in the next 30 days. A remote information disclosure vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.
• CVE-2019-5403, published 2019-08-09. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. A remote multiple cross-site scripting vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.