HP Nonstop Server Software vulnerabilities

5 CVEs affecting HP Nonstop Server Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8974, published 2018-02-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-5803, published 2018-02-15. High severity, CVSS 7.5. EPSS: 7.5% chance of exploitation in the next 30 days. A Remote Disclosure of Information vulnerability in HPE NonStop Servers using SSH Service version L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA was found.
CVE-2011-2411, published 2011-10-02. High severity, CVSS 9.0. EPSS: 6% chance of exploitation in the next 30 days. Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute arbitrary code via…
CVE-2017-5788, published 2018-02-15. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. A Local Disclosure of Sensitive Information vulnerability in HPE NonStop Software Essentials version T0894 T0894H02 through T0894H02^AAI was found.
CVE-2017-8974, published 2018-02-15. Medium severity, CVSS 4.4. EPSS: 0.6% chance of exploitation in the next 30 days. A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05…
CVE-2012-3280, published 2013-02-13. Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via an OSS…