Hewlett Packard Enterprise (HPE) vulnerabilities
790 CVEs and advisories name Hewlett Packard Enterprise (HPE) as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-37156ArubaOS-CX Platform-Level Denial-of-Service Vulnerability
- CVE-2025-37155Authenticated Privilege Escalation Allows Unauthorized Access in Network Management Interface
- CVE-2025-37145Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface
- CVE-2025-37144Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface
- CVE-2025-37143Authenticated Arbitrary File Download Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web Interface (Physical Access Required)
- CVE-2025-37142Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface
- CVE-2025-37141Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface
- CVE-2025-37140Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface
- CVE-2025-37139Vulnerability in AOS firmware allows for Authenticated Local malicious actor to Permanently Disable Boot
- CVE-2025-37138Authenticated Command Injection Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface (Physical Access Required)
- CVE-2025-37137Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)
- CVE-2025-37136Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)
- CVE-2025-37135Authenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)
- CVE-2025-37134Authenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface
- CVE-2025-37133Authenticated Command Injection Vulnerability in AOS-8 Controller/Mobility Conductor Web-Based Management Interface via the CLI Binaryalong with accounting controls for tracking and logging user activities and resource usage.
- CVE-2025-37132Authenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write
- CVE-2025-37148Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service Vulnerability
- CVE-2025-37147Secure Boot Bypass allows for Compromise of Hardware Root of Trust
- CVE-2025-37146Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code Execution
- CVE-2025-37149A potential out-of-bound reads vulnerability in HPE ProLiant RL300 Gen11 Server's UEFI firmware.
- CVE-2025-37122Unauthenticated Reflected Cross-Site Scripting
- CVE-2025-37125Broken access control vulnerability in Firewall Configuration Leads to Unauthorized Access to Internal Network Resources
- CVE-2025-37123Authenticated Command Injection leads to Unauthorized Actions in CLI Interface
- CVE-2025-37124Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface
- CVE-2025-37128Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS
- CVE-2025-37129Authenticated Remote Code Execution allows Exploit in Scripts Feature
- CVE-2025-37127Authenticated Replay Attack contains Cryptographic Vulnerability
- CVE-2025-37130Unrestricted Binary allows File Enumeration in Underlying Operating System
- CVE-2025-37126Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface
- CVE-2025-37131Authenticated Arbitrary File Read allows Data Exposure in CLI Interface