hpe Vulnerability Advisory Catalog

Total 170 security vulnerabilities recorded for hpe software and firmware.

← Back to All Vendors
Component: aruba_networking_private_5g_core

A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker...

📅 2026-04-07
CVSS 8.8 Dossier →
Component: arubaos-cx

A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitr...

📅 2026-03-11
CVSS 6.5 Dossier →
Component: aruba_networking_private_5g_core

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sens...

📅 2026-02-17
CVSS 6.5 Dossier →
Component: aruba_networking_private_5g_core

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sens...

📅 2026-02-17
CVSS 6.5 Dossier →
Component: aruba_networking_private_5g_core

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful e...

📅 2026-02-17
CVSS 6.5 Dossier →
Component: aruba_networking_private_5g_core

An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vuln...

📅 2026-02-17
CVSS 8.8 Dossier →
CVE-2025-37164 CRITICAL
Component: oneview

A remote code execution issue exists in HPE OneView....

📅 2025-12-16
CVSS 10.0 Dossier →
Component: arubaos-cx

A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to ...

📅 2025-11-18
CVSS 5.3 Dossier →
Component: arubaos-cx

A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an...

📅 2025-11-18
CVSS 5.8 Dossier →
Component: arubaos-cx

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to condu...

📅 2025-11-18
CVSS 6.7 Dossier →
Component: arubaos-cx

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to condu...

📅 2025-11-18
CVSS 6.7 Dossier →
Component: arubaos-cx

A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an att...

📅 2025-11-18
CVSS 6.8 Dossier →
Component: arubaos-cx

A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only us...

📅 2025-11-18
CVSS 7.8 Dossier →
Component: autopass_license_server

An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18....

📅 2025-07-16
CVSS 7.3 Dossier →
Component: autopass_license_server

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18....

📅 2025-07-16
CVSS 7.3 Dossier →
Component: autopass_license_server

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18....

📅 2025-07-16
CVSS 7.5 Dossier →
Component: autopass_license_server

An information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17....

📅 2025-07-14
CVSS 7.5 Dossier →
Component: autopass_license_server

An information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17....

📅 2025-07-14
CVSS 7.5 Dossier →
Component: autopass_license_server

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17....

📅 2025-07-14
CVSS 8.0 Dossier →
Component: autopass_license_server

An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17....

📅 2025-07-14
CVSS 7.3 Dossier →
CVE-2025-37099 CRITICAL
Component: insight_remote_support

A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646....

📅 2025-07-01
CVSS 9.8 Dossier →
Component: insight_remote_support

A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646....

📅 2025-07-01
CVSS 7.5 Dossier →
Component: insight_remote_support

A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service...

📅 2025-07-01
CVSS 7.5 Dossier →
CVE-2025-37096 CRITICAL
Component: storeonce_system

A command injection remote code execution vulnerability exists in HPE StoreOnce Software....

📅 2025-06-02
CVSS 9.8 Dossier →
Page 1 of 8 (170 Total Records)