HPE Superdome Flex Server Firmware vulnerabilities

5 CVEs affecting HPE Superdome Flex Server Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-37939, published 2023-03-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-26581, published 2021-04-01. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The…
CVE-2019-11998, published 2020-01-16. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerability could allow an Administrator to bypass security…
CVE-2020-7137, published 2020-05-19. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or later to resolve this issue.
CVE-2022-23702, published 2022-04-12. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers. The vulnerability could be locally exploited to allow an user with Administrator access to…
CVE-2022-37939, published 2023-03-10. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to allow disclosure of information. HPE has…