Hewlett Packard Enterprise (HPE)
Page 5 of 5 — Hewlett Packard Enterprise (HPE) CVEs from a corpus of 459, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-37935 | Medium | 5.5 | 2023-03-01 | HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password. |
CVE-2022-44535 | High | 8.8 | 2023-01-05 | A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote low-privileged authenticated users to escalate th… |
CVE-2022-44534 | High | 7.2 | 2023-01-05 | A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on… |
CVE-2022-43540 | Medium | 5.5 | 2023-01-05 | A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive inform… |
CVE-2022-43539 | Medium | 5.7 | 2023-01-05 | A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtai… |
CVE-2022-43538 | High | 7.2 | 2023-01-05 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying hos… |
CVE-2022-43537 | High | 7.2 | 2023-01-05 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying hos… |
CVE-2022-43536 | High | 7.2 | 2023-01-05 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying hos… |
CVE-2022-43535 | High | 7.8 | 2023-01-05 | A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit… |
CVE-2022-43534 | High | 7.8 | 2023-01-05 | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit cou… |
CVE-2022-43533 | High | 7.8 | 2023-01-05 | A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit co… |
CVE-2022-43532 | High | 8.0 | 2023-01-05 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site… |
CVE-2022-43531 | High | 8.8 | 2023-01-05 | Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attack… |
CVE-2022-43530 | High | 8.8 | 2023-01-05 | Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks… |
CVE-2022-43529 | Medium | 4.6 | 2023-01-05 | A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a… |
CVE-2022-43528 | Medium | 4.8 | 2023-01-05 | Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a multi-factor authentication code. Successf… |
CVE-2022-43527 | Medium | 6.1 | 2023-01-05 | Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a refl… |
CVE-2022-43526 | Medium | 6.1 | 2023-01-05 | Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a refl… |
CVE-2022-43525 | Medium | 6.1 | 2023-01-05 | Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a refl… |
CVE-2022-43524 | High | 8.7 | 2023-01-05 | A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct a st… |
CVE-2022-43523 | High | 8.8 | 2023-01-05 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to con… |
CVE-2022-43522 | High | 8.8 | 2023-01-05 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to con… |
CVE-2022-43521 | High | 8.8 | 2023-01-05 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to con… |
CVE-2022-43520 | High | 8.8 | 2023-01-05 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to con… |
CVE-2022-43519 | High | 8.8 | 2023-01-05 | Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to con… |
CVE-2022-37934 | Medium | 6.8 | 2023-01-05 | A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allo… |
CVE-2022-37933 | High | 7.3 | 2023-01-05 | A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be exploited to allow loca… |
CVE-2022-44533 | High | 7.2 | 2022-12-12 | A vulnerability in the Aruba EdgeConnect Enterprise web management interface allows remote authenticated users to run arbitrary commands on the underlying host… |
CVE-2022-44532 | Medium | 4.9 | 2022-12-12 | An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of this vulnerability… |
CVE-2022-43542 | High | 7.2 | 2022-12-12 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A… |
CVE-2022-43541 | High | 7.2 | 2022-12-12 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A… |
CVE-2022-43518 | Medium | 4.9 | 2022-12-12 | An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface. Successful exploitation of this vulnerability results i… |
CVE-2022-37932 | High | 8.8 | 2022-12-12 | A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability co… |
CVE-2022-37930 | Medium | 6.7 | 2022-12-12 | A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could potentially al… |
CVE-2022-37929 | Medium | 6.7 | 2022-12-12 | Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays. |
CVE-2022-37928 | High | 8.0 | 2022-12-12 | Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary… |
CVE-2022-37927 | Medium | 6.1 | 2022-12-12 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashboard (OVGD). |
CVE-2022-37926 | Medium | 5.5 | 2022-12-12 | A vulnerability within the web-based management interface of EdgeConnect Enterprise could allow a remote attacker to conduct a stored cross-site scripting (XSS… |
CVE-2022-37925 | Medium | 6.1 | 2022-12-12 | A vulnerability within the web-based management interface of Aruba EdgeConnect Enterprise could allow a remote attacker to conduct a reflected cross-site scrip… |
CVE-2022-37924 | High | 7.2 | 2022-12-12 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A… |
CVE-2022-37923 | High | 7.2 | 2022-12-12 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A… |
CVE-2022-37922 | High | 7.2 | 2022-12-12 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A… |
CVE-2022-37921 | High | 7.2 | 2022-12-12 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A… |
CVE-2022-37920 | High | 7.2 | 2022-12-12 | Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A… |
CVE-2022-37919 | High | 7.5 | 2022-12-12 | A vulnerability exists in the API of Aruba EdgeConnect Enterprise. An unauthenticated attacker can exploit this condition via the web-based management interfac… |
CVE-2021-46846 | Medium | 6.4 | 2022-12-12 | Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5. |
CVE-2019-5408 | Medium | 6.5 | 2019-08-09 | Command View Advanced Edition (CVAE) products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed… |
CVE-2019-5407 | Medium | 6.3 | 2019-08-09 | A remote information disclosure vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. |
CVE-2019-5406 | High | 7.2 | 2019-08-09 | A remote session reuse vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. |
CVE-2019-5405 | High | 7.3 | 2019-08-09 | A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. |
CVE-2019-5404 | High | 8.8 | 2019-08-09 | A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. |
CVE-2019-5403 | Medium | 4.8 | 2019-08-09 | A remote multiple cross-site scripting vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. |
CVE-2019-5402 | Critical | 9.4 | 2019-08-09 | A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. |
CVE-2019-5400 | Medium | 6.3 | 2019-08-09 | A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. |
CVE-2019-5399 | Critical | 9.4 | 2019-08-09 | A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. |
CVE-2019-5398 | Medium | 5.4 | 2019-08-09 | A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. |
CVE-2019-5397 | Critical | 9.4 | 2019-08-09 | A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. |
CVE-2019-5396 | Critical | 9.4 | 2019-08-09 | A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. |
CVE-2019-5395 | High | 8.8 | 2019-08-09 | A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. |