HP Inc restful interface tool vulnerabilities

Latest HP Inc restful interface tool CVEs

Newest publication first

1. CVE-2017-8968 A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 (hprest-1.5-79.x86_64.rpm, ilorest-2.0-403.x86_64.rpm). The issue is resolved in iLOREST v...

   Published 2018-08-06

   High·CVSS 7.8 EPSS 1.2%

   A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 (hprest-1.5-79.x86_64.rpm, ilorest-2.0-403.x86_64.rpm). The issue is resolved in iLOREST v2.1 or subsequent versions.

2. CVE-2016-2023 HPE RESTful Interface Tool 1.40 allows local users to obtain sensitive information via unspecified vectors.

   Published 2016-05-30

   Medium·CVSS 5.5 EPSS 0.46%

   HPE RESTful Interface Tool 1.40 allows local users to obtain sensitive information via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.