Hewlett Packard Enterprise (HPE) vulnerabilities
790 CVEs and advisories name Hewlett Packard Enterprise (HPE) as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-23593Unauthenticated Limited File Read allows Data Exposure in Web Interface
- CVE-2026-23592Insecure File Handling allows Remote Code Execution in Backup Functionality
- CVE-2025-37181Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
- CVE-2025-37185Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
- CVE-2025-37184Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention
- CVE-2025-37183Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
- CVE-2025-37182Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
- CVE-2025-37186Local Privilege Escalation Vulnerability in HPE Aruba Networking Virtual Intranet Access (VIA) Client for Linux
- CVE-2025-37179Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System
- CVE-2025-37178Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating System
- CVE-2025-37177Authenticated Arbitrary File Deletion Vulnerability in AOS-10 or AOS-8 Command Line Interface (CLI)
- CVE-2025-37176Authenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflow
- CVE-2025-37175Authenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management Interface
- CVE-2025-37174Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface
- CVE-2025-37173Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI)
- CVE-2025-37172Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface
- CVE-2025-37171Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface
- CVE-2025-37170Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management Interface
- CVE-2025-37169Stack Overflow Vulnerability in AOS-10 Web-Based Management Interface
- CVE-2025-37168Unauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating System
- CVE-2025-37166Unexpected shutdown in HPE Instant On Access Points after processing specific packets
- CVE-2025-37165Exposure of VLAN information in unintended network interfaces
- CVE-2025-37164A remote code execution issue exists in HPE OneView.
- CVE-2025-37162Authenticated Command Injection Vulnerability Leading to Arbitrary Remote Command Execution
- CVE-2025-37161Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in Web Management Interface
- CVE-2025-37163Authenticated Command Injection Vulnerability in HPE Aruba Networking Management Software (AirWave) CLI
- CVE-2025-37160Authenticated Broken Access Control (BAC) in REST API Configuration Service
- CVE-2025-37159Authenticated Session Hijacking Allows Unauthorized Access in Network Switching Software
- CVE-2025-37158Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX
- CVE-2025-37157Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX