Hewlett Packard Enterprise vulnerabilities
363 CVEs and advisories name Hewlett Packard Enterprise as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-37911Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS.
- CVE-2022-37910A buffer overflow vulnerability exists in the ArubaOS command line interface.
- CVE-2022-37909Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs.
- CVE-2022-37908An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers.
- CVE-2022-37907A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an im
- CVE-2022-37906An authenticated path traversal vulnerability exists in the ArubaOS command line interface.
- CVE-2022-37905Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequen
- CVE-2022-37904Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequen
- CVE-2022-37903A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web int
- CVE-2022-37912Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
- CVE-2022-37902Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
- CVE-2022-37901Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
- CVE-2022-37900Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
- CVE-2022-37899Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
- CVE-2022-37898Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.
- CVE-2022-37897There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets des
- CVE-2020-7136A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access.
- CVE-2019-11991HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4.
- CVE-2018-7080A vulnerability exists in the firmware of embedded BLE radios that are part of some Aruba Access points.
- CVE-2018-7079Aruba ClearPass Policy Manager guest authorization failure.
- CVE-2018-7067A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise.
- CVE-2018-7066An unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked devices.
- CVE-2018-7065An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation.
- CVE-2018-7063In Aruba ClearPass, disabled API admins can still perform read/write operations.
- CVE-2018-7116HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003
- CVE-2018-7115HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in dbman.exe opcode 10001
- CVE-2018-7114HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code ex
- CVE-2018-7113A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the security restriction
- CVE-2018-7112The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information.
- CVE-2018-7111A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.