Skip to contentHewlett Packard Enterprise (hpe) vulnerabilities
Newest
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayUnrestricted Binary allows File Enumeration in Underlying Operating SystemCVE-2025-371306.5 Medium
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayAuthenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line InterfaceCVE-2025-371267.2 High
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayAuthenticated Arbitrary File Read allows Data Exposure in CLI InterfaceCVE-2025-371314.9 Medium
- hewlett packard enterprise (hpe) hpe telco service activatorHPE Telco Service Activator, Protection Mechanism FailureCVE-2025-371093.5 Low
- hewlett packard enterprise (hpe) hpe telco service activatorHPE Telco Service Activator, Protection Mechanism FailureCVE-2025-371083.5 Low
- hewlett packard enterprise (hpe) hpe telco service orchestratorHPE Telco Service Orchestrator Software, Authenticated SQL InjectionCVE-2025-371047.1 High
- hewlett packard enterprise (hpe) hpe networking instant onHardcoded Credential Exposure Allows Unauthorized Access in Web InterfaceCVE-2025-371039.8 Critical
- hewlett packard enterprise (hpe) hpe networking instant onAuthenticated Command Injection Vulnerability In Instant On Command Line InterfaceCVE-2025-371027.2 High
- hewlett packard enterprise (hpe) hpe aruba networking private 5g coreExposure of Sensitive Information to an Unauthorized User in HPE Aruba Networking Private 5G CoreCVE-2025-371007.7 High
- hewlett packard enterprise (hpe) hpe storeonce software, hpe storeonce system +1 moreA command injection remote code execution vulnerability exists in HPE StoreOnce Software.CVE-2025-370967.5 High
- hewlett packard enterprise (hpe) hpe storeonce software, hpe storeonce system +1 moreA directory traversal information disclosure vulnerability exists in HPE StoreOnce Software.CVE-2025-370955.9 Medium
- hewlett packard enterprise (hpe) hpe storeonce software, hpe storeonce system +1 moreA directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.CVE-2025-370945.5 Medium
- hewlett packard enterprise (hpe) hpe storeonce software, hpe storeonce system +1 moreAn authentication bypass vulnerability exists in HPE StoreOnce Software.CVE-2025-370939.8 Critical
- hewlett packard enterprise (hpe) hpe storeonce software, hpe storeonce system +1 moreA command injection remote code execution vulnerability exists in HPE StoreOnce Software.CVE-2025-370927.5 High
- hewlett packard enterprise (hpe) hpe storeonce software, hpe storeonce system +1 moreA command injection remote code execution vulnerability exists in HPE StoreOnce Software.CVE-2025-370917.2 High
- hewlett packard enterprise (hpe) hpe storeonce software, hpe storeonce system +1 moreA server-side request forgery vulnerability exists in HPE StoreOnce Software.CVE-2025-370906.9 Medium
- hewlett packard enterprise (hpe) hpe storeonce software, hpe storeonce system +1 moreA command injection remote code execution vulnerability exists in HPE StoreOnce Software.CVE-2025-370897.5 High
- hewlett packard enterprise (hpe) hpe cray data virtualization service (dvs)A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS)....CVE-2025-370886.8 Medium
- hewlett packard enterprise (hpe) hpe cray operating system (cos)A vulnerability in the kernel of the Cray Operating System (COS) could allow an attacker to...CVE-2025-270875.5 Medium
- hewlett packard enterprise hpe performance cluster manager (hpcm)A vulnerability in the cmdb service of the HPE Performance Cluster Manager (HPCM) could allow an...CVE-2025-370879.8 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreReflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal (CP) of an AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-based Management InterfaceCVE-2025-270845.4 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreArbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility ConductorCVE-2025-270854.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreAuthenticated Command Injection Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-270837.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking aos +1 moreAuthenticated Remote Code Execution Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File WriteCVE-2025-270827.2 High
- hewlett packard enterprise (hpe) aos-10 apArbitrary File Creation vulnerability allows for Authenticated Remote Code Execution in CLI InterfaceCVE-2025-270796.0 Medium
- hewlett packard enterprise (hpe) aos-10 apAuthenticated Remote Command Execution caused by Insecure Function Usage in System BinaryCVE-2025-270786.5 Medium
- hewlett packard enterprise (hpe) virtual intranet access (via)Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows ClientCVE-2025-250415.5 Medium
- hewlett packard enterprise (hpe) hpe athonet coreAn E-RAB Release Command packet containing a malformed NAS PDU will cause the Athonet MME to...CVE-2024-244565.9 Medium
- hewlett packard enterprise (hpe) aos-cxAuthenticated Sensitive Information Disclosure exposes Credentials in AOS-CX Command Line InterfaceCVE-2025-270806.0 Medium
- hewlett packard enterprise (hpe) aos-cxAuthenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST InterfaceCVE-2025-250424.3 Medium
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreFailure to Properly Enforce Port ACLs on CPU generated packets in CX 9300 SwitchesCVE-2025-250403.3 Low
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreAuthenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management InterfaceCVE-2025-250394.7 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreSensitive Data Exposure Vulnerability in HPE Aruba Networking ClearPass Policy Manager (CPPM)CVE-2025-230606.6 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreSensitive Information Disclosure in HPE Aruba Networking ClearPass Policy ManagerCVE-2025-230596.8 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreAuthenticated Broken Access Control Vulnerability in ClearPass Policy Manager Web-Based Management InterfaceCVE-2025-230588.8 High
- arubanetworks fabric composer, hewlett packard enterprise (hpe) hpe aruba networking fabric composer (afc) +1 moreAuthenticated privilege escalation via broken access controlCVE-2025-230536.5 Medium
- arubanetworks fabric composer, hewlett packard enterprise (hpe) hpe aruba networking fabric composer (afc) +1 moreAuthenticated Response Manipulation allows Unauthorized Actions in Management InterfaceCVE-2025-230546.5 Medium
- arubanetworks fabric composer, hewlett packard enterprise (hpe) hpe aruba networking fabric composer (afc) +1 moreAuthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Aruba Networking Fabric Composer Web Management InterfaceCVE-2025-230575.5 Medium
- arubanetworks fabric composer, hewlett packard enterprise (hpe) hpe aruba networking fabric composer (afc) +1 moreAuthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Aruba Networking Fabric Composer Web Management InterfaceCVE-2025-230565.5 Medium
- arubanetworks fabric composer, hewlett packard enterprise (hpe) hpe aruba networking fabric composer (afc) +1 moreAuthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Aruba Networking Fabric Composer Web Management InterfaceCVE-2025-230555.5 Medium
- hewlett packard enterprise (hpe) hpe aruba networking aosAuthenticated Command Injection Vulnerability allows Unauthorized Command Execution in CLI InterfaceCVE-2025-230527.2 High
- hewlett packard enterprise (hpe) hpe aruba networking aosAuthenticated Remote Code Execution in AOS Web-based Management InterfaceCVE-2025-230517.2 High
- hewlett packard enterprise (hpe) aos-cx, hpe arubaos-cx +1 moreUnauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switchesCVE-2024-540103.4 Low
- hewlett packard enterprise (hpe) hpe aruba networking 501 wireless client bridgeAuthenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client BridgeCVE-2024-540077.2 High
- hewlett packard enterprise (hpe) hpe aruba networking 501 wireless client bridgeAuthenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client BridgeCVE-2024-540067.2 High
- hewlett packard enterprise (hpe) hpe alletra storage mp b10000Remote authentication bypass vulnerability in HPE Alletra Storage MP B10000 in versions prior to...CVE-2024-540094.0 Medium
- hewlett packard enterprise (hpe) hpe aruba networking airwave management platformAuthenticated Remote Code Execution (RCE) in HPE Aruba Networking AirWave Management PlatformCVE-2024-540087.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreAuthenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management InterfaceCVE-2024-536724.7 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreAuthenticated Stored Cross-Site Scripting (XSS) in HPE Aruba Networking ClearPass Policy Manager Web-based Management InterfaceCVE-2024-517734.8 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) hpe aruba networking clearpass policy manager +1 moreAuthenticated Deserialization Vulnerability in ClearPass Policy Manager Web-Based Management Interface Leading to a Remote Command Execution (RCE)CVE-2024-517726.4 Medium
- Show moreLoading…