CVE-2022-37931

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability in NetBatch-Plus software allows unauthorized access to the application.

HPE has provided a workaround and fix. Please refer to HPE Security Bulletin

HPESBNS04388

for details.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
HPE	NetBatch-Plus software	T9189L01 - T9189L01^ABY; T9189H01 – T9189H01^ABW

References

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04388en_usMitigation, Vendor Advisory
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04388en_usMitigation, Vendor Advisory

Timeline

Published: Nov 22, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-379329.8A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. T CVE-2022-379337.8A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be expl CVE-2022-379347.5A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotel CVE-2022-379355.5HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.CVE-2022-379369.8Unauthenticated Java deserialization vulnerability in Serviceguard Manager CVE-2022-379379.8Pre-auth memory corruption in HPE Serviceguard CVE-2022-379389.8Unauthenticated server side request forgery in HPE Serviceguard Manager CVE-2022-379395.5A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be loca CVE-2022-37944.3The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2 CVE-2022-379406.1Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely ex CVE-2022-379526.1A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an atta CVE-2022-379536.1An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow an