CVE:CVE-2022-37928
CNNVD:CNNVD-202212-2873
Hewlett Packard Enterprise OneView是美国慧与（Hewlett Packard Enterprise）公司的一款便于IT部门自动化管理设备的软件。
Hewlett Packard Enterprise OneView存在安全漏洞，该漏洞源于混合闪存阵列和 Nimble Storage 辅助闪存阵列中的数据真实性漏洞验证不充分。
solution:Upgrade hpe sf100_firmware to a higher version than 5.2.1.900,5.3.0.0,and avoid the version (,5.2.1.900),5.3.0.0; Upgrade hpe sf300_firmware to a higher version than 5.2.1.900,5.3.0.0,and avoid the version (,5.2.1.900),5.3.0.0; Upgrade hpe hf60c_firmware to a higher version than 5.2.1.900,5.3.0.0,and avoid the version (,5.2.1.900),5.3.0.0; Upgrade hpe hf40c_firmware to a higher version than 5.2.1.900,5.3.0.0,and avoid the version (,5.2.1.900),5.3.0.0; Upgrade hpe hf20_firmware to a higher version than 5.2.1.900,5.3.0.0,and avoid the version (,5.2.1.900),5.3.0.0; Upgrade hpe hf40_firmware to a higher version than 5.2.1.900,5.3.0.0,and avoid the version (,5.2.1.900),5.3.0.0; Upgrade hpe hf60_firmware to a higher version than 5.2.1.900,5.3.0.0,and avoid the version (,5.2.1.900),5.3.0.0; Upgrade hpe hf20h_firmware to a higher version than 5.2.1.900,5.3.0.0,and avoid the version (,5.2.1.900),5.3.0.0; Upgrade hpe hf20c_firmware to a higher version than 5.2.1.900,5.3.0.0,and avoid the version (,5.2.1.900),5.3.0.0