Hewlett Packard Enterprise (HPE) vulnerabilities
790 CVEs and advisories name Hewlett Packard Enterprise (HPE) as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-23059Sensitive Information Disclosure in HPE Aruba Networking ClearPass Policy Manager
- CVE-2025-23058Authenticated Broken Access Control Vulnerability in ClearPass Policy Manager Web-Based Management Interface
- CVE-2025-23053Authenticated privilege escalation via broken access control
- CVE-2025-23054Authenticated Response Manipulation allows Unauthorized Actions in Management Interface
- CVE-2025-23057Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Aruba Networking Fabric Composer Web Management Interface
- CVE-2025-23056Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Aruba Networking Fabric Composer Web Management Interface
- CVE-2025-23055Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Aruba Networking Fabric Composer Web Management Interface
- CVE-2025-23052Authenticated Command Injection Vulnerability allows Unauthorized Command Execution in CLI Interface
- CVE-2025-23051Authenticated Remote Code Execution in AOS Web-based Management Interface
- CVE-2024-54010Unauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switches
- CVE-2024-54007Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge
- CVE-2024-54006Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge
- CVE-2024-54009Remote authentication bypass vulnerability in HPE Alletra Storage MP B10000 in versions prior to version 10.4.5 could be remotely exploited
- CVE-2024-54008Authenticated Remote Code Execution (RCE) in HPE Aruba Networking AirWave Management Platform
- CVE-2024-53672Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface
- CVE-2024-51773Authenticated Stored Cross-Site Scripting (XSS) in HPE Aruba Networking ClearPass Policy Manager Web-based Management Interface
- CVE-2024-51772Authenticated Deserialization Vulnerability in ClearPass Policy Manager Web-Based Management Interface Leading to a Remote Command Execution (RCE)
- CVE-2024-51771Authenticated Remote Code Execution (RCE) via OGNL Injection in HPE Aruba Networking ClearPass Web-Based Management Interface
- CVE-2024-53676A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.
- CVE-2024-53675An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain
- CVE-2024-53674An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain
- CVE-2024-53673A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code.
- CVE-2024-11622An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain
- CVE-2024-51765A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS).
- CVE-2024-51764A security vulnerability has been identified in HPE Data Management Framework (DMF) Suite (CXFS).
- CVE-2024-24459An invalid memory access when handling the ProtocolIE_ID field of S1Setup Request messages in Athonet vEPC MME v11.4.0 allows attackers to c
- CVE-2024-24458An invalid memory access when handling the ENB Configuration Transfer messages containing invalid PLMN Identities in Athonet vEPC MME v11.4.
- CVE-2024-24457An invalid memory access when handling the ProtocolIE_ID field of E-RAB Setup List Context SURes messages in Athonet vEPC MME v11.4.0 allows
- CVE-2024-24455An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC MME v11.4.0 allows a
- CVE-2024-24454An invalid memory access when handling the ProtocolIE_ID field of E-RAB Modify Request messages in Athonet vEPC MME v11.4.0 allows attackers