6.7

CVE-2022-37930

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could potentially allow local disclosure of sensitive information.

Data is provided by the National Vulnerability Database (NVD)
Hpe ≫ Sf100 Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Sf100 Version-
Hpe ≫ Sf100 Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Sf100 Version-
Hpe ≫ Sf300 Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Sf300 Version-
Hpe ≫ Sf300 Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Sf300 Version-
Hpe ≫ Hf60c Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf60c Version-
Hpe ≫ Hf60c Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf60c Version-
Hpe ≫ Hf40c Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf40c Version-
Hpe ≫ Hf40c Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf40c Version-
Hpe ≫ Hf20 Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf20 Version-
Hpe ≫ Hf20 Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf20 Version-
Hpe ≫ Hf40 Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf40 Version-
Hpe ≫ Hf40 Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf40 Version-
Hpe ≫ Hf60 Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf60 Version-
Hpe ≫ Hf60 Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf60 Version-
Hpe ≫ Hf20h Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf20h Version-
Hpe ≫ Hf20h Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf20h Version-
Hpe ≫ Hf20c Firmware SwEditionltsr Version < 5.2.1.900
   Hpe ≫ Hf20c Version-
Hpe ≫ Hf20c Firmware Version5.3.0.0 SwEdition-
   Hpe ≫ Hf20c Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.177
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
security-alert@hpe.com 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.