Hewlett Packard Enterprise
362 CVEs in 145 Hewlett Packard Enterprise products, including Intelligent Management Center (Imc) Plat, Aruba Mobility Conductor (Formerly Mobility Maste…
Hewlett Packard Enterprise products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76740 | High | 7.2 | 2026-10-19 | A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to e… |
CVE-2026-76739 | Medium | 4.3 | 2026-10-19 | A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and mod… |
CVE-2026-79843 | Medium | 6.5 | 2026-10-15 | A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termin… |
CVE-2026-79841 | Medium | 5.8 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption. |
CVE-2026-79840 | High | 7.3 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash. |
CVE-2026-79839 | High | 7.3 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash. |
CVE-2026-79838 | High | 7.3 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash. |
CVE-2026-79837 | High | 7.3 | 2026-10-15 | A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting i… |
CVE-2026-79836 | Medium | 6.4 | 2026-10-15 | A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to pr… |
CVE-2026-79835 | Low | 2.8 | 2026-10-15 | A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server. |
CVE-2026-79834 | High | 7.4 | 2026-10-15 | A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution. |
CVE-2026-79833 | High | 7.5 | 2026-10-15 | A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial o… |
CVE-2026-79832 | High | 7.6 | 2026-10-15 | A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash. |
CVE-2026-79831 | Medium | 6.6 | 2026-10-15 | A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution. |
CVE-2026-79830 | Medium | 6.6 | 2026-10-15 | A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution. |
CVE-2026-79829 | High | 8.2 | 2026-10-15 | A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt. |
CVE-2026-79828 | High | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow. |
CVE-2026-79827 | High | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow. |
CVE-2026-79826 | High | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow. |
CVE-2026-79825 | High | 7.1 | 2026-10-15 | A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow. |
CVE-2026-79824 | High | 8.0 | 2026-10-15 | A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a… |
CVE-2026-79823 | Medium | 4.0 | 2026-10-15 | HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior. |
CVE-2026-79822 | High | 7.1 | 2026-10-15 | A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow. |
CVE-2026-79821 | High | 8.2 | 2026-10-15 | A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down. |
CVE-2026-76668 | Medium | 6.3 | 2026-10-15 | A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data. |
CVE-2026-76667 | Medium | 5.7 | 2026-10-15 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. |
CVE-2026-76666 | Medium | 4.7 | 2026-10-15 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. |
CVE-2026-76665 | High | 7.1 | 2026-10-15 | A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow. |
CVE-2026-76664 | Medium | 6.4 | 2026-10-15 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations |
CVE-2026-76662 | Medium | 5.9 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS. |
CVE-2026-76661 | High | 7.6 | 2026-10-15 | A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data. |
CVE-2026-76660 | High | 8.7 | 2026-10-15 | A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data. |
CVE-2026-76659 | High | 7.5 | 2026-10-15 | A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service. |
CVE-2026-76656 | Medium | 5.3 | 2026-10-15 | A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed und… |
CVE-2026-73799 | High | 7.5 | 2026-10-15 | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption |
CVE-2026-76655 | High | 7.5 | 2026-10-14 | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution |
CVE-2026-73798 | High | 8.2 | 2026-10-14 | A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service. |
CVE-2026-73797 | Medium | 5.3 | 2026-10-14 | A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called. |
CVE-2026-73796 | Medium | 4.4 | 2026-10-14 | A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query. |
CVE-2026-73795 | Medium | 6.4 | 2026-10-14 | A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service. |
CVE-2026-73794 | Medium | 4.6 | 2026-10-14 | HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG) |
CVE-2026-73793 | High | 7.9 | 2026-10-14 | HPE NonStop Middleware software has secret key handling and data deserialization vulnerability. |
CVE-2026-73792 | Low | 3.8 | 2026-10-14 | A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow. |
CVE-2026-73791 | Low | 2.0 | 2026-10-14 | A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow. |
CVE-2026-73790 | High | 8.2 | 2026-10-14 | A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown. |
CVE-2026-79842 | Critical | 9.1 | 2026-10-08 | An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713 |
CVE-2026-76720 | Medium | 4.3 | 2026-09-29 | A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect. |
CVE-2026-76719 | High | 8.2 | 2026-09-29 | A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions. |
CVE-2026-76718 | High | 8.2 | 2026-09-29 | A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions. |
CVE-2026-73785 | High | 7.5 | 2026-09-11 | A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS). |
CVE-2026-73784 | High | 8.8 | 2026-09-11 | A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user. |
CVE-2025-37112 | Medium | 6.0 | 2025-07-31 | A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exp… |
CVE-2025-37111 | Medium | 6.0 | 2025-07-31 | A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful… |
CVE-2025-37110 | Medium | 6.0 | 2025-07-31 | A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrato… |
CVE-2025-37107 | High | 7.3 | 2025-07-16 | An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. |
CVE-2025-37106 | High | 7.3 | 2025-07-16 | An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. |
CVE-2025-37105 | High | 7.5 | 2025-07-16 | An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. |
CVE-2024-51770 | High | 7.5 | 2025-07-14 | An information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. |
CVE-2024-51769 | High | 7.5 | 2025-07-14 | An information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. |
CVE-2024-51768 | High | 8.0 | 2025-07-14 | An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. |
CVE-2024-51767 | High | 7.3 | 2025-07-14 | An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. |
CVE-2025-37099 | Critical | 9.8 | 2025-07-01 | A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646. |
CVE-2025-37098 | High | 7.5 | 2025-07-01 | A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646. |
CVE-2025-37097 | High | 7.5 | 2025-07-01 | A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service |
CVE-2025-37101 | High | 8.7 | 2025-06-26 | A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC). This vulnerability could be exploited allowing an attacker wi… |
CVE-2025-27086 | High | 8.1 | 2025-04-21 | A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication. |
CVE-2025-27081 | Medium | 6.8 | 2025-04-10 | A potential security vulnerability in HPE NonStop OSM Service Connection Suite could potentially be exploited to allow a local Denial of Service. |
CVE-2024-13804 | Critical | 9.8 | 2025-03-30 | Unauthenticated RCE in HPE Insight Cluster Management Utility |
CVE-2024-11856 | Low | 3.7 | 2024-12-02 | A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification. |
CVE-2024-51766 | Medium | 6.5 | 2024-11-22 | A potential security vulnerability has been identified in the HPE NonStop DISK UTIL (T9208) product. This vulnerability could be exploited to cause a denial of… |
CVE-2024-42504 | Medium | 4.3 | 2024-10-03 | A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a Cross-Site Request Forgery (CSRF) in the login flow. |
CVE-2024-42400 | Medium | 5.3 | 2024-08-06 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these v… |
CVE-2024-42399 | Medium | 5.3 | 2024-08-06 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these v… |
CVE-2024-42398 | Medium | 5.3 | 2024-08-06 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these v… |
CVE-2024-22444 | Medium | 6.1 | 2024-07-24 | A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site sc… |
CVE-2024-41914 | High | 8.1 | 2024-07-24 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross… |
CVE-2024-22443 | High | 7.2 | 2024-07-24 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side… |
CVE-2024-22440 | Medium | 6.8 | 2024-04-17 | A potential security vulnerability has been identified in HPE Compute Scale-up Server 3200 server. This vulnerability could cause disclosure of sensitive info… |
CVE-2024-22439 | Medium | 6.9 | 2024-04-15 | A potential security vulnerability has been identified in HPE FlexFabric and FlexNetwork series products. This vulnerability could be exploited to gain privil… |
CVE-2024-22438 | Low | 3.5 | 2024-04-15 | A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820 Network switches. The vulnerability could be remotely… |
CVE-2024-22437 | High | 7.3 | 2024-04-15 | A potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vulnerability could… |
CVE-2024-22435 | High | 8.3 | 2024-04-15 | A potential security vulnerability has been identified in Web ViewPoint Enterprise software. This vulnerability could be exploited to allow unauthorized users… |
CVE-2023-6573 | Medium | 5.5 | 2024-01-23 | HPE OneView may have a missing passphrase during restore. |
CVE-2023-50275 | High | 7.5 | 2024-01-23 | HPE OneView may allow clusterService Authentication Bypass resulting in denial of service. |
CVE-2023-50274 | High | 7.8 | 2024-01-23 | HPE OneView may allow command injection with local privilege escalation. |
CVE-2023-39268 | Medium | 4.5 | 2023-08-29 | A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful expl… |
CVE-2023-39267 | Medium | 6.6 | 2023-08-29 | An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Ser… |
CVE-2023-39266 | High | 8.3 | 2023-08-29 | A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) at… |
CVE-2023-28084 | Medium | 5.5 | 2023-04-25 | HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens |
CVE-2022-37912 | High | 7.2 | 2022-12-12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ab… |
CVE-2022-37911 | Low | 3.8 | 2022-12-12 | Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A successful exploit could allow an authe… |
CVE-2022-37910 | Medium | 4.4 | 2022-12-12 | A buffer overflow vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in a denial of service on t… |
CVE-2022-37909 | Medium | 5.3 | 2022-12-12 | Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs. The scenarios in which dis… |
CVE-2022-37908 | Medium | 5.8 | 2022-12-12 | An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware ch… |
CVE-2022-37907 | Medium | 5.8 | 2022-12-12 | A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS) condition on an impacted system. A su… |
CVE-2022-37906 | Medium | 6.5 | 2022-12-12 | An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability results in the ability… |
CVE-2022-37905 | Medium | 6.6 | 2022-12-12 | Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful expl… |
CVE-2022-37904 | Medium | 6.6 | 2022-12-12 | Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful expl… |
CVE-2022-37903 | High | 7.2 | 2022-12-12 | A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful… |
CVE-2022-37902 | High | 7.2 | 2022-12-12 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ab… |