Hewlett Packard Enterprise (HPE) vulnerabilities
790 CVEs and advisories name Hewlett Packard Enterprise (HPE) as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-45616There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution b
- CVE-2023-45615There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending
- CVE-2023-45614There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending
- CVE-2023-30912 A remote code execution issue exists in HPE OneView.
- CVE-2023-43510Authenticated Remote Command Injection in ClearPass Policy Manager Web-Based Management Interface Leading to Partial System Compromise
- CVE-2023-43509Unauthenticated Endpoint Allows Sending Arbitrary OnGuard Notifications
- CVE-2023-43508Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface
- CVE-2023-43507Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
- CVE-2023-43506Local Privilege Escalation in ClearPass OnGuard Linux Agent
- CVE-2023-30911HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service.
- CVE-2023-30909A remote authentication bypass issue exists in some OneView APIs.
- CVE-2023-30908A remote authentication bypass issue exists in a OneView API.
- CVE-2023-38486Hardware Root of Trust Bypass in 9200 and 9000 Series Controllers and Gateways
- CVE-2023-38485Multiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and Gateways
- CVE-2023-38484Multiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and Gateways
- CVE-2023-37440Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure
- CVE-2023-37439Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface
- CVE-2023-37438Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37437Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37436Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37435Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37434Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37433Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37432Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37431Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37430Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37429Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37428Authenticated Remote Code Execution via Path Traversal in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
- CVE-2023-37427Authenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
- CVE-2023-37426Shared SSH Static Host Keys in EdgeConnect SD-WAN Orchestrator