HP Storeserv Management Console vulnerabilities

2 CVEs affecting HP Storeserv Management Console, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-29214, published 2021-12-10.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-7197, published 2020-10-26. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC) 3.7.0.0 is an off node multiarray manager web application and remains isolated from data on the…
• CVE-2021-29214, published 2021-12-10. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. A security vulnerability has been identified in HPE StoreServ Management Console (SSMC). An authenticated SSMC administrator could exploit the vulnerability to inject code and elevate their privilege…