HP Service Pack For Proliant vulnerabilities

2 CVEs affecting HP Service Pack For Proliant, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7135, published 2020-04-27.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-7135, published 2020-04-27. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE servers running Linux. The vulnerable…
• CVE-2018-7118, published 2019-04-09. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software earlier than version 2018.09.0.