CVE-2024-22435

HighCVSS 8.3/10Last modified Jun 17, 2026

Description

A potential security vulnerability has been identified in Web ViewPoint Enterprise software. This vulnerability could be exploited to allow unauthorized users to access some resources on a NonStop system.

Metrics

CVSS 3.1 8.3/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
Hewlett Packard Enterprise	HPE NonStop Web ViewPoint Enterprise software	>= See security bulletin HPESBNS04624, < T0986L01^AAZ ; >= See security bulletin HPESBNS04624, < T0986H01^AAY
hp	web_viewpoint_t0986	l01\^aax; l01\^aav; l01\^aar; l01\^aap; l01\^aaj; l01\^aah; l01\^aaf; l01\^aad; l01\^aab; h01\^aaw; h01\^aau; h01\^aaq; h01\^aao; h01\^aai; h01\^aag; h01\^aae; h01\^aac; h01\^aaa

References

Timeline

Published: Apr 15, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-224366.5A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a denial of service.CVE-2024-224377.3A potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vu CVE-2024-224383.5A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820 Network switches. The vulnerability CVE-2024-224396.9A potential security vulnerability has been identified in HPE FlexFabric and FlexNetwork series products. This vulnerability could be exploi CVE-2024-22445.3REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successfu CVE-2024-224406.8A potential security vulnerability has been identified in HPE Compute Scale-up Server 3200 server. This vulnerability could cause disclosure CVE-2024-224419.8HPE Cray Parallel Application Launch Service (PALS) is subject to an authentication bypass.CVE-2024-224429.8The vulnerability could be remotely exploited to bypass authentication.CVE-2024-224438.8A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to con CVE-2024-224446.1A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a refl CVE-2024-224457.2Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability. A remote high privileged at CVE-2024-224477.8Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability. An attacker could potentially e