CVE-2021-29218

MEDIUM

6.7

CVSS Score

Published: February 4, 2022 at 10:29 PM UTC

Updated: June 17, 2026 at 03:47 AM UTC

13 products affected across 1 vendorAgentless ManagementProliant Agentless ManagementApollo 6500 Gen10 Plus· also runs on 1 platform

Using HPE Agentless Management by N/A?

Get instant alerts when new vulnerabilities affect HPE Agentless Management - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.7

Exploit prediction

EPSS 0.2%

Description

A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows version(s): Prior to 1.44.0.0, 10.96.0.0. This vulnerability could be exploited locally by a user with high privileges to execute malware that may lead to a loss of confidentiality, integrity, and availability. HPE has provided software updates to resolve the vulnerability in HPE Agentless Management Service for Windows.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Agentless Management · HPE

95%

v < 1.44.0.0

Affected range stops below 1.44.0.0, so it looks safe — our inference, not a vendor statement

microsoft-windows (environment)

Proliant Agentless Management · HPE

95%

v < 10.96.0.0

Affected range stops below 10.96.0.0, so it looks safe — our inference, not a vendor statement

hpe-apollo-20 (environment) · hpe-apollo-2000-gen-10-plus (environment) · hpe-apollo-6500 (environment) · hpe-apollo-6500-gen10-plus (environment) · hpe-apollo-80 (environment) · hpe-proliant-dl (environment) · hpe-proliant-ml (environment) · hpe-synergy-480-gen9 (environment) · hpe-synergy-620-gen9 (environment) · hpe-synergy-660-gen9 (environment) · hpe-synergy-680-gen9 (environment)

Apollo 20 · HPEdevice

80%

All versions

Apollo 2000 Gen 10 Plus · HPEdevice

80%

All versions

Apollo 6500 · HPEdevice

80%

All versions

Apollo 6500 Gen10 Plus · HPEdevice

80%

All versions