Hewlett Packard Enterprise vulnerabilities
363 CVEs and advisories name Hewlett Packard Enterprise as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-51768An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17.
- CVE-2024-51767An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17.
- CVE-2025-37099A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.
- CVE-2025-37098A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.
- CVE-2025-37097A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service
- CVE-2025-37101HPE OneView for VMware vCenter (OV4VC), Local Elevation of Privilege
- CVE-2025-27086A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication.
- CVE-2025-27081HPE NonStop OSM Service Connection Suite, Denial of Service vulnerability
- CVE-2024-13804Unauthenticated RCE in HPE Insight Cluster Management Utility
- CVE-2024-11856HPE IceWall Products, Remote Unauthorized Data Modification
- CVE-2024-51766HPE NonStop DISK UTIL, Local Denial of Service vulnerability
- CVE-2024-42504HPE IceWall Agent products, Cross-Site Request Forgery (CSRF)
- CVE-2024-42400Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol
- CVE-2024-42399Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol
- CVE-2024-42398Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol
- CVE-2024-22444A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a refl
- CVE-2024-22443A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to con
- CVE-2024-41914A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to con
- CVE-2024-22440HPE Compute Scale-up Server 3200 Server, Disclosure of Sensitive Information
- CVE-2024-22439Certain HPE FlexNetwork and FlexFabric Switches, Remote Authentication Bypass
- CVE-2024-22438HPE OfficeConnect 1820 Network switches, Cross-Site Request Forgery (CSRF)
- CVE-2024-22437HPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of Privilege
- CVE-2024-22435HPE NonStop Web ViewPoint Enterprise software, Unauthorized access
- CVE-2023-6573HPE OneView may have a missing passphrase during restore.
- CVE-2023-50275HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.
- CVE-2023-50274HPE OneView may allow command injection with local privilege escalation.
- CVE-2023-39268Memory Corruption Vulnerability in ArubaOS-Switch
- CVE-2023-39267Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface
- CVE-2023-39266Unauthenticated Stored Cross-Site Scripting in ArubaOS-Switch
- CVE-2023-28084HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens