Hewlett Packard Enterprise HPE Oneview
7 CVEs affecting Hewlett Packard Enterprise HPE Oneview. Latest disclosed: 2026-09-29. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76719 | High | 8.2 | 2026-09-29 | A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions. |
CVE-2026-76718 | High | 8.2 | 2026-09-29 | A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions. |
CVE-2023-50274 | High | 7.8 | 2024-01-23 | HPE OneView may allow command injection with local privilege escalation. |
CVE-2023-50275 | High | 7.5 | 2024-01-23 | HPE OneView may allow clusterService Authentication Bypass resulting in denial of service. |
CVE-2023-6573 | Medium | 5.5 | 2024-01-23 | HPE OneView may have a missing passphrase during restore. |
CVE-2023-28084 | Medium | 5.5 | 2023-04-25 | HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens |
CVE-2026-76720 | Medium | 4.3 | 2026-09-29 | A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect. |