Hewlett Packard Enterprise (HPE) vulnerabilities
790 CVEs and advisories name Hewlett Packard Enterprise (HPE) as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-37425Unauthenticated Stored Cross-Site Scripting Vulnerability (XSS) in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
- CVE-2023-37424Unauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
- CVE-2023-37423Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
- CVE-2023-37422Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
- CVE-2023-37421Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
- CVE-2023-38402Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client
- CVE-2023-38401Local Privilege Escalation in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client
- CVE-2023-3718Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface
- CVE-2023-35982Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-35981Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-35980Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-30906The vulnerability could be locally exploited to allow escalation of privilege.
- CVE-2023-35979Unauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management Interface
- CVE-2023-35978Reflected Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface
- CVE-2023-35977Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface
- CVE-2023-35976Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface
- CVE-2023-35975Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion
- CVE-2023-35974Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-35973Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-35972Authenticated Remote Command Execution in ArubaOS Web-based Management Interface
- CVE-2023-35971Unauthenticated Stored Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface
- CVE-2023-30905The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced privilege.
- CVE-2023-30904A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information.
- CVE-2023-30903HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6.
- CVE-2023-30510Authenticated Server-side Request Forgery in Aruba EdgeConnect Enterprise Web Management Interface
- CVE-2023-30509Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30508Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30507Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30506Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30505Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface