hpe Vulnerability Advisory Catalog

Total 170 security vulnerabilities recorded for hpe software and firmware.

← Back to All Vendors
CVE-2025-37095 CRITICAL
Component: storeonce_system

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software....

📅 2025-06-02
CVSS 9.8 Dossier →
Component: storeonce_system

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software....

📅 2025-06-02
CVSS 5.5 Dossier →
CVE-2025-37093 CRITICAL
Component: storeonce_system

An authentication bypass vulnerability exists in HPE StoreOnce Software....

📅 2025-06-02
CVSS 9.8 Dossier →
CVE-2025-37092 CRITICAL
Component: storeonce_system

A command injection remote code execution vulnerability exists in HPE StoreOnce Software....

📅 2025-06-02
CVSS 9.8 Dossier →
Component: storeonce_system

A command injection remote code execution vulnerability exists in HPE StoreOnce Software....

📅 2025-06-02
CVSS 7.2 Dossier →
CVE-2025-37090 CRITICAL
Component: storeonce_system

A server-side request forgery vulnerability exists in HPE StoreOnce Software....

📅 2025-06-02
CVSS 9.8 Dossier →
CVE-2025-37089 CRITICAL
Component: storeonce_system

A command injection remote code execution vulnerability exists in HPE StoreOnce Software....

📅 2025-06-02
CVSS 9.8 Dossier →
Component: performance_cluster_manager

A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication....

📅 2025-04-21
CVSS 8.1 Dossier →
CVE-2024-53676 CRITICAL
Component: insight_remote_support

A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution....

📅 2024-11-27
CVSS 9.8 Dossier →
Component: insight_remote_support

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases....

📅 2024-11-26
CVSS 7.3 Dossier →
Component: insight_remote_support

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases....

📅 2024-11-26
CVSS 7.3 Dossier →
Component: insight_remote_support

A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code....

📅 2024-11-26
CVSS 8.1 Dossier →
Component: insight_remote_support

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases....

📅 2024-11-26
CVSS 7.3 Dossier →
Component: oneview

This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users....

📅 2024-10-18
CVSS 5.5 Dossier →
CVE-2024-22441 CRITICAL
Component: cray_parallel_application_launch_service

HPE Cray Parallel Application Launch Service (PALS) is subject to an authentication bypass....

📅 2024-06-13
CVSS 9.8 Dossier →
Component: integrated_lights-out_5_firmware

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 6 (iLO 6). The vulnerability c...

📅 2023-12-19
CVSS 7.5 Dossier →
Component: oneview

A remote code execution issue exists in HPE OneView. ...

📅 2023-10-25
CVSS 7.2 Dossier →
Component: integrated_lights-out_5_firmware

HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service....

📅 2023-10-18
CVSS 6.8 Dossier →
Component: msa_1060_storage_firmware

HPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent interpretation of HTTP requests. ...

📅 2023-10-09
CVSS 5.4 Dossier →
Component: arubaos-switch

A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Succes...

📅 2023-08-29
CVSS 4.5 Dossier →
Component: arubaos-switch

An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Deni...

📅 2023-08-29
CVSS 6.6 Dossier →
Component: arubaos-switch

A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting...

📅 2023-08-29
CVSS 8.3 Dossier →
Component: arubaos-cx

An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results i...

📅 2023-08-01
CVSS 8.8 Dossier →
Component: intelligent_provisioning

The vulnerability could be locally exploited to allow escalation of privilege. ...

📅 2023-07-18
CVSS 7.5 Dossier →
Page 2 of 8 (170 Total Records)