CVE-2023-30906

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The vulnerability could be locally exploited to allow escalation of privilege.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
Hewlett Packard Enterprise (HPE)HPE Intelligent Provisioning (IP) for Gen9—

References

Timeline

Published
Jul 18, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-309089.8A remote authentication bypass issue exists in a OneView API.CVE-2023-309099.8A remote authentication bypass issue exists in some OneView APIs.CVE-2023-30917.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. This vulnerability affecCVE-2023-309105.4HPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent interpretation of HTTP requests.CVE-2023-309117.5HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service.CVE-2023-309129.8A remote code execution issue exists in HPE OneView.CVE-2023-309135.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2023-309145.5In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privilegCVE-2023-309155.5In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privilegCVE-2023-309167.8In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution prCVE-2023-309177.8In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution prCVE-2023-309185.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv
CVE-2023-30906: High severity, CVSS 7.8 | Vulnix