HP Storage Essentials vulnerabilities

3 CVEs affecting HP Storage Essentials, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-10992, published 2020-03-10.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-10992, published 2020-03-10. Critical severity, CVSS 9.8. EPSS: 10.5% chance of exploitation in the next 30 days. In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request to invoker/JMXInvokerServlet, aka PSRT110461.
• CVE-2010-4029, published 2010-10-28. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Storage Essentials before 6.3.0, when LDAP authentication is enabled, allows remote attackers to obtain sensitive information, modify data, or cause a denial of…
• CVE-2009-0715, published 2009-04-21. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Secure NaviCLI in HP Storage Essentials 6.0.2 through 6.0.4 allows remote authenticated users to obtain "access" or "extended privileges" via unknown vectors.