Vulnerability · Published Apr 15, 2024 · Assigned by hpe
CVE-2024-22435HPE NonStop Web ViewPoint Enterprise software, Unauthorized access
High 8.3
In plain English
A high-severity information exposure in HPE NonStop Web ViewPoint Enterprise software from Hewlett Packard Enterprise. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.4%top 61.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A potential security vulnerability has been identified in Web ViewPoint Enterprise software. This vulnerability could be exploited to allow unauthorized users to access some resources on a NonStop system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hewlett Packard Enterprise | HPE NonStop Web ViewPoint Enterprise software | See security bulletin HPESBNS04624 – before T0986L01^AAZ See security bulletin HPESBNS04624 – before T0986H01^AAY |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H