Hewlett Packard Enterprise (HPE) vulnerabilities
790 CVEs and advisories name Hewlett Packard Enterprise (HPE) as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-37109HPE Telco Service Activator, Protection Mechanism Failure
- CVE-2025-37108HPE Telco Service Activator, Protection Mechanism Failure
- CVE-2025-37104HPE Telco Service Orchestrator Software, Authenticated SQL Injection
- CVE-2025-37103Hardcoded Credential Exposure Allows Unauthorized Access in Web Interface
- CVE-2025-37102Authenticated Command Injection Vulnerability In Instant On Command Line Interface
- CVE-2025-37100Exposure of Sensitive Information to an Unauthorized User in HPE Aruba Networking Private 5G Core
- CVE-2025-37096A command injection remote code execution vulnerability exists in HPE StoreOnce Software.
- CVE-2025-37095A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software.
- CVE-2025-37094A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.
- CVE-2025-37093An authentication bypass vulnerability exists in HPE StoreOnce Software.
- CVE-2025-37092A command injection remote code execution vulnerability exists in HPE StoreOnce Software.
- CVE-2025-37091A command injection remote code execution vulnerability exists in HPE StoreOnce Software.
- CVE-2025-37090A server-side request forgery vulnerability exists in HPE StoreOnce Software.
- CVE-2025-37089A command injection remote code execution vulnerability exists in HPE StoreOnce Software.
- CVE-2025-37088A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS).
- CVE-2025-27087A vulnerability in the kernel of the Cray Operating System (COS) could allow an attacker to perform a local Denial of Service (DoS) attack.
- CVE-2025-37087A vulnerability in the cmdb service of the HPE Performance Cluster Manager (HPCM) could allow an attacker to gain access to an arbitrary fil
- CVE-2025-27084Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal (CP) of an AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-based Management Interface
- CVE-2025-27085Arbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor
- CVE-2025-27083Authenticated Command Injection Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface
- CVE-2025-27082Authenticated Remote Code Execution Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File Write
- CVE-2025-27079Arbitrary File Creation vulnerability allows for Authenticated Remote Code Execution in CLI Interface
- CVE-2025-27078Authenticated Remote Command Execution caused by Insecure Function Usage in System Binary
- CVE-2025-25041Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client
- CVE-2024-24456An E-RAB Release Command packet containing a malformed NAS PDU will cause the Athonet MME to immediately crash, potentially due to a buffer
- CVE-2025-27080Authenticated Sensitive Information Disclosure exposes Credentials in AOS-CX Command Line Interface
- CVE-2025-25042Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface
- CVE-2025-25040Failure to Properly Enforce Port ACLs on CPU generated packets in CX 9300 Switches
- CVE-2025-25039Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface
- CVE-2025-23060Sensitive Data Exposure Vulnerability in HPE Aruba Networking ClearPass Policy Manager (CPPM)