Skip to contentHewlett Packard Enterprise (hpe) vulnerabilities
Newest
- hewlett packard enterprise (hpe) virtual intranet access (via)Local Privilege Escalation Vulnerability in HPE Aruba Networking Virtual Intranet Access (VIA) Client for LinuxCVE-2025-371867.8 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreOut-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating SystemCVE-2025-371795.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreOut-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating SystemCVE-2025-371785.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerability in AOS-10 or AOS-8 Command Line Interface (CLI)CVE-2025-371776.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflowCVE-2025-371766.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management InterfaceCVE-2025-371757.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management InterfaceCVE-2025-371747.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreImproper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI)CVE-2025-371737.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management InterfaceCVE-2025-371727.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management InterfaceCVE-2025-371717.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management InterfaceCVE-2025-371707.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreStack Overflow Vulnerability in AOS-10 Web-Based Management InterfaceCVE-2025-371697.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreUnauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating SystemCVE-2025-371688.2 High
- hewlett packard enterprise (hpe) instant onUnexpected shutdown in HPE Instant On Access Points after processing specific packetsCVE-2025-371667.5 High
- hewlett packard enterprise (hpe) instant onExposure of VLAN information in unintended network interfacesCVE-2025-371657.5 High
- hewlett packard enterprise (hpe) hpe oneview, oneview +1 moreA remote code execution issue exists in HPE OneView.CVE-2025-37164In KEVPublic exploitEPSS 90.2%10.0 Critical
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking 100 series cellular bridge +1 moreAuthenticated Command Injection Vulnerability Leading to Arbitrary Remote Command ExecutionCVE-2025-371626.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking 100 series cellular bridge +1 moreUnauthenticated Remote Denial-of-Service (DoS) Vulnerability in Web Management InterfaceCVE-2025-371617.5 High
- arubanetworks airwave, hewlett packard enterprise (hpe) hpe aruba networking management software (airwave) +1 moreAuthenticated Command Injection Vulnerability in HPE Aruba Networking Management Software (AirWave) CLICVE-2025-371637.2 High
- hewlett packard enterprise (hpe) hpe aruba networking aos-cx, hpe arubaos-cx +1 moreAuthenticated Broken Access Control (BAC) in REST API Configuration ServiceCVE-2025-371605.3 Medium
- hewlett packard enterprise (hpe) hpe aruba networking aos-cx, hpe arubaos-cx +1 moreAuthenticated Session Hijacking Allows Unauthorized Access in Network Switching SoftwareCVE-2025-371595.8 Medium
- hewlett packard enterprise (hpe) hpe aruba networking aos-cx, hpe arubaos-cx +1 moreAuthenticated Command Injection allows Unauthorized Command Execution in AOS-CXCVE-2025-371586.7 Medium
- hewlett packard enterprise (hpe) hpe aruba networkign aos-cx, hpe arubaos-cx +1 moreAuthenticated Command Injection allows Unauthorized Command Execution in AOS-CXCVE-2025-371576.7 Medium
- hpe arubaos-cx, hewlett packard enterprise (hpe) hpe aruba networking aos-cx +1 moreArubaOS-CX Platform-Level Denial-of-Service VulnerabilityCVE-2025-371566.8 Medium
- hewlett packard enterprise (hpe) hpe aruba networking aos-cx, hpe arubaos-cx +1 moreAuthenticated Privilege Escalation Allows Unauthorized Access in Network Management InterfaceCVE-2025-371557.8 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371454.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371444.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web Interface (Physical Access Required)CVE-2025-371434.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371424.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371414.9 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371404.9 Medium
- hewlett packard enterprise (hpe) arubaos (aos)Vulnerability in AOS firmware allows for Authenticated Local malicious actor to Permanently Disable BootCVE-2025-371396.0 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in CLI Binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface (Physical Access Required)CVE-2025-371386.2 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)CVE-2025-371376.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)CVE-2025-371366.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Arbitrary File Deletion Vulnerabilities in AOS-8 Controller/Mobility Conductor Command Line Interface (CLI)CVE-2025-371356.5 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in the Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management InterfaceCVE-2025-371347.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection Vulnerability in AOS-8 Controller/Mobility Conductor Web-Based Management Interface via the CLI Binaryalong with accounting controls for tracking and logging user activ…CVE-2025-371337.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Remote Code Execution Vulnerability in AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface via Arbitrary File WriteCVE-2025-371327.2 High
- hewlett packard enterprise (hpe) arubaos (aos)Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service VulnerabilityCVE-2025-371486.5 Medium
- hewlett packard enterprise (hpe) arubaos (aos)Secure Boot Bypass allows for Compromise of Hardware Root of TrustCVE-2025-371477.1 High
- hewlett packard enterprise (hpe) arubaos (aos)Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code ExecutionCVE-2025-371467.2 High
- hewlett packard enterprise (hpe) proliant rl300 gen11 serverA potential
out-of-bound reads vulnerability in HPE ProLiant RL300 Gen11 Server's UEFI firmware.CVE-2025-371496.0 Medium
- hewlett packard enterprise (hpe) hpe aruba networking clearpass policy managerUnauthenticated Reflected Cross-Site ScriptingCVE-2025-371226.1 Medium
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayBroken access control vulnerability in Firewall Configuration Leads to Unauthorized Access to Internal Network ResourcesCVE-2025-371257.5 High
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayAuthenticated Command Injection leads to Unauthorized Actions in CLI InterfaceCVE-2025-371238.8 High
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayUnauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge InterfaceCVE-2025-371248.6 High
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayAuthenticated Arbitrary Process Termination allows potential System Disruption in ECOSCVE-2025-371286.8 Medium
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayAuthenticated Remote Code Execution allows Exploit in Scripts FeatureCVE-2025-371296.7 Medium
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayAuthenticated Replay Attack contains Cryptographic VulnerabilityCVE-2025-371277.2 High
- Show moreLoading…