Hewlett Packard Enterprise (HPE)
Page 5 of 6 — Hewlett Packard Enterprise (HPE) CVEs from a corpus of 598, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-45624 | High | 7.5 | 2023-11-14 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerabi… |
CVE-2023-45623 | High | 7.5 | 2023-11-14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vuln… |
CVE-2023-45622 | High | 7.5 | 2023-11-14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of these vulner… |
CVE-2023-45621 | High | 7.5 | 2023-11-14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabiliti… |
CVE-2023-45620 | High | 7.5 | 2023-11-14 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabiliti… |
CVE-2023-45619 | High | 8.2 | 2023-11-14 | There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of t… |
CVE-2023-45618 | High | 8.2 | 2023-11-14 | There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). Successful exploit… |
CVE-2023-45617 | High | 8.2 | 2023-11-14 | There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of th… |
CVE-2023-45616 | Critical | 9.8 | 2023-11-14 | There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially… |
CVE-2023-45615 | Critical | 9.8 | 2023-11-14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted p… |
CVE-2023-45614 | Critical | 9.8 | 2023-11-14 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted p… |
CVE-2023-43510 | Medium | 4.7 | 2023-10-25 | A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying ho… |
CVE-2023-43509 | Medium | 5.8 | 2023-10-25 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to send notifications to compu… |
CVE-2023-43508 | Medium | 6.3 | 2023-10-25 | Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change th… |
CVE-2023-43507 | High | 7.2 | 2023-10-25 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks… |
CVE-2023-43506 | High | 7.8 | 2023-10-25 | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role… |
CVE-2023-30912 | High | 7.2 | 2023-10-25 | A remote code execution issue exists in HPE OneView. |
CVE-2023-30911 | Medium | 6.8 | 2023-10-18 | HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service. |
CVE-2023-30909 | Critical | 9.8 | 2023-09-14 | A remote authentication bypass issue exists in some OneView APIs. |
CVE-2023-30908 | Critical | 9.8 | 2023-09-07 | A remote authentication bypass issue exists in a OneView API. |
CVE-2023-38486 | High | 7.7 | 2023-09-06 | A vulnerability in the secure boot implementation on affected Aruba 9200 and 9000 Series Controllers and Gateways allows an attacker to bypass security control… |
CVE-2023-38485 | High | 8.0 | 2023-09-06 | Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code… |
CVE-2023-38484 | High | 8.0 | 2023-09-06 | Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code… |
CVE-2023-37440 | Medium | 5.5 | 2023-08-22 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to conduct a server-sid… |
CVE-2023-37439 | Medium | 6.1 | 2023-08-22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL i… |
CVE-2023-37438 | Medium | 6.5 | 2023-08-22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL i… |
CVE-2023-37437 | Medium | 6.5 | 2023-08-22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL i… |
CVE-2023-37436 | Medium | 6.5 | 2023-08-22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL i… |
CVE-2023-37435 | Medium | 6.5 | 2023-08-22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL i… |
CVE-2023-37434 | Medium | 6.5 | 2023-08-22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL i… |
CVE-2023-37433 | Medium | 6.5 | 2023-08-22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL i… |
CVE-2023-37432 | Medium | 6.5 | 2023-08-22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL i… |
CVE-2023-37431 | Medium | 6.5 | 2023-08-22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL i… |
CVE-2023-37430 | Medium | 6.5 | 2023-08-22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL i… |
CVE-2023-37429 | Medium | 6.5 | 2023-08-22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL i… |
CVE-2023-37428 | High | 7.2 | 2023-08-22 | A vulnerability in the EdgeConnect SD-WAN Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underl… |
CVE-2023-37427 | High | 7.2 | 2023-08-22 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to run arbitrary commands… |
CVE-2023-37426 | High | 7.4 | 2023-08-22 | EdgeConnect SD-WAN Orchestrator instances prior to the versions resolved in this advisory were found to have shared static SSH host keys for all installations… |
CVE-2023-37425 | High | 8.0 | 2023-08-22 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to conduct a stored cro… |
CVE-2023-37424 | High | 8.1 | 2023-08-22 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary comman… |
CVE-2023-37423 | High | 8.1 | 2023-08-22 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross… |
CVE-2023-37422 | High | 8.1 | 2023-08-22 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross… |
CVE-2023-37421 | High | 8.1 | 2023-08-22 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross… |
CVE-2023-38402 | High | 7.1 | 2023-08-15 | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTE… |
CVE-2023-38401 | High | 7.8 | 2023-08-15 | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could a… |
CVE-2023-3718 | High | 8.8 | 2023-08-01 | An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the abi… |
CVE-2023-35982 | Critical | 9.8 | 2023-07-25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-35981 | Critical | 9.8 | 2023-07-25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-35980 | Critical | 9.8 | 2023-07-25 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-30906 | High | 7.5 | 2023-07-18 | The vulnerability could be locally exploited to allow escalation of privilege. |
CVE-2023-35979 | Medium | 5.3 | 2023-07-05 | There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation of thi… |
CVE-2023-35978 | Medium | 6.1 | 2023-07-05 | A vulnerability in ArubaOS could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-ba… |
CVE-2023-35977 | Medium | 6.5 | 2023-07-05 | Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation coul… |
CVE-2023-35976 | Medium | 6.5 | 2023-07-05 | Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation coul… |
CVE-2023-35975 | Medium | 6.5 | 2023-07-05 | An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the abilit… |
CVE-2023-35974 | High | 7.2 | 2023-07-05 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the abi… |
CVE-2023-35973 | High | 7.2 | 2023-07-05 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the abi… |
CVE-2023-35972 | High | 7.2 | 2023-07-05 | An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability res… |
CVE-2023-35971 | High | 8.8 | 2023-07-05 | A vulnerability in the ArubaOS web-based management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) att… |
CVE-2023-30905 | High | 7.8 | 2023-06-16 | The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced privilege. |
CVE-2023-30904 | Medium | 5.5 | 2023-06-16 | A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information. |
CVE-2023-30903 | Medium | 5.5 | 2023-06-16 | HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6. |
CVE-2023-30510 | Medium | 4.1 | 2023-05-16 | A vulnerability exists in the Aruba EdgeConnect Enterprise web management interface that allows remote authenticated users to issue arbitrary URL requests from… |
CVE-2023-30509 | Medium | 4.9 | 2023-05-16 | Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulner… |
CVE-2023-30508 | Medium | 4.9 | 2023-05-16 | Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulner… |
CVE-2023-30507 | Medium | 4.9 | 2023-05-16 | Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulner… |
CVE-2023-30506 | High | 7.2 | 2023-05-16 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underly… |
CVE-2023-30505 | High | 7.2 | 2023-05-16 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underly… |
CVE-2023-30504 | High | 7.2 | 2023-05-16 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underly… |
CVE-2023-30503 | High | 7.2 | 2023-05-16 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underly… |
CVE-2023-30502 | High | 7.2 | 2023-05-16 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underly… |
CVE-2023-30501 | High | 7.2 | 2023-05-16 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underly… |
CVE-2023-22791 | Medium | 5.4 | 2023-05-08 | A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker a… |
CVE-2023-22790 | High | 7.2 | 2023-05-08 | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these v… |
CVE-2023-22789 | High | 7.2 | 2023-05-08 | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these v… |
CVE-2023-22788 | High | 7.2 | 2023-05-08 | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these v… |
CVE-2023-22787 | High | 7.5 | 2023-05-08 | An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Success… |
CVE-2023-22786 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22785 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22784 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22783 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22782 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22781 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22780 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-22779 | Critical | 9.8 | 2023-05-08 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted… |
CVE-2023-28092 | Medium | 6.1 | 2023-05-01 | A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnerable to exp… |
CVE-2023-28090 | Medium | 5.5 | 2023-04-25 | An HPE OneView appliance dump may expose SNMPv3 read credentials |
CVE-2023-28089 | High | 7.1 | 2023-04-25 | An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules |
CVE-2023-28088 | High | 7.8 | 2023-04-25 | An HPE OneView appliance dump may expose SAN switch administrative credentials |
CVE-2023-28087 | Medium | 5.5 | 2023-04-25 | An HPE OneView appliance dump may expose OneView user accounts |
CVE-2023-28086 | Medium | 5.5 | 2023-04-25 | An HPE OneView appliance dump may expose proxy credential settings |
CVE-2023-28091 | Medium | 5.5 | 2023-04-14 | HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump |
CVE-2023-28085 | Medium | 5.5 | 2023-04-14 | An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials |
CVE-2023-25596 | Medium | 4.5 | 2023-03-22 | A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext f… |
CVE-2023-25595 | Medium | 5.5 | 2023-03-22 | A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive inf… |
CVE-2023-25594 | Medium | 6.3 | 2023-03-22 | A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change… |
CVE-2023-25593 | High | 7.1 | 2023-03-22 | Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting… |
CVE-2023-25592 | High | 7.1 | 2023-03-22 | Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting… |
CVE-2023-25591 | High | 7.6 | 2023-03-22 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sen… |
CVE-2023-25590 | High | 7.8 | 2023-03-22 | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role… |