CVE-2022-37933

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be exploited to allow local unauthorized data injection. HPE has made the following software updates to resolve the vulnerability in HPE Superdome Flex firmware 3.60.50 and below and Superdome Flex 280 servers firmware 1.40.60 and below.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74

Affected software

Vendor	Product	Versions
Hewlett Packard Enterprise (HPE)	HPE Superdome Flex Server; HPE Superdome Flex 280 Server	Prior to 3.60.50; Prior to 1.40.60

References

Timeline

Published: Jan 5, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-379347.5A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotel CVE-2022-379355.5HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.CVE-2022-379369.8Unauthenticated Java deserialization vulnerability in Serviceguard Manager CVE-2022-379379.8Pre-auth memory corruption in HPE Serviceguard CVE-2022-379389.8Unauthenticated server side request forgery in HPE Serviceguard Manager CVE-2022-379395.5A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be loca CVE-2022-37944.3The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2 CVE-2022-379406.1Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely ex CVE-2022-379526.1A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an atta CVE-2022-379536.1An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow an CVE-2022-379547.8DirectX Graphics Kernel Elevation of Privilege Vulnerability CVE-2022-379557.8Windows Group Policy Elevation of Privilege Vulnerability