Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:hpe_nimble_storage_hybrid_flash_arrays;_nimble_storage_all_flash_arrays;_nimble_storage_secondary_flash_arrays:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductHpe Nimble Storage Hybrid Flash Arrays; Nimble Storage All Flash Arrays; Nimble Storage Secondary Flash Arrays (3dc1c113-57c6-5abb-9e18-700b7ae28cf3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-28618 vulnerable 2026-06-08 05:42:44.655057 Details available
A command injection security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Secondary Flash Arrays that could allow an attacker to execute arbitrary commands on a Nimble appliance. HPE has made the following software updates to resolve the vulnerability in HPE Nimble Storage: 5.0.10.100 or later, 5.2.1.0 or later, 6.0.0.100 or later.
Published: 2022-05-20T20:50:19.000Z
Updated: 2024-08-03T05:56:16.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23705 vulnerable 2026-06-08 05:40:58.274971 Details available
A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage Secondary Flash Arrays which could potentially allow the upload, but not execution, of unauthorized update binaries to the array. HPE has made the following software updates to resolve the vulnerability in HPE Nimble Storage: 5.0.10.100 or later, 5.2.1.0 or later, 6.0.0.100 or later.
Published: 2022-05-09T20:20:57.000Z
Updated: 2024-08-03T03:51:45.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23703 vulnerable 2026-06-08 05:40:58.235037 Details available
A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Secondary Flash Arrays during update. This would potentially allow an attacker to intercept and modify network communication for software updates initiated by the Nimble appliance. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 5.0.10.100, 5.2.1.500, 6.0.0.100
Published: 2022-04-12T16:11:37.000Z
Updated: 2024-08-03T03:51:46.006Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7139 vulnerable 2026-06-08 05:27:11.993659 Details available
Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to access and modify sensitive information on the system. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100
Published: 2020-05-19T22:07:42.000Z
Updated: 2024-08-04T09:18:03.113Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7138 vulnerable 2026-06-08 05:27:11.983764 Details available
Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100
Published: 2020-05-19T22:11:33.000Z
Updated: 2024-08-04T09:18:03.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11996 vulnerable 2026-06-08 05:12:38.457630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.