hpe

187 tracked vulnerabilities.

CVE-2023-28084 MEDIUM
HPE OneView < 6.60.04 and OneView Global Dashboard < 2.72 - Insufficiently Protected Credentials in Appliance Dumps
Apr 25, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-28085 MEDIUM
HPE OneView Global Dashboard - Info Disclosure
Apr 14, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-1168 HIGH
ArubaOS-CX 10.06.0000-10.06.0240 - Authenticated Remote Code Execution in Network Analytics Engine
Mar 22, 2023
CVSS 7.2
EPSS 0.01
CVE-2022-37940 MEDIUM
HPE FlexFabric 5700 Switch Series < R2432P61 - URL Redirection via Host Header Injection
Mar 22, 2023
CVSS 5.3
EPSS 0.00
CVE-2022-37939 LOW
HPE Superdome Flex <3.65.8, Superdome Flex 280 <1.45.8 - Info Discl...
Mar 10, 2023
CVSS 2.3
EPSS 0.00
CVE-2022-37938 CRITICAL
HPE Serviceguard for Linux < a.12.80.05 - Unauthenticated Server-Side Request Forgery
Mar 01, 2023
CVSS 9.8
EPSS 0.00
CVE-2022-37937 CRITICAL
HPE Serviceguard for Linux < a.12.80.05 - Unauthenticated Out-of-bounds Write
Mar 01, 2023
CVSS 9.8
EPSS 0.01
CVE-2022-37936 CRITICAL
HPE Serviceguard for Linux < a.12.80.05 - Unauthenticated Remote Code Execution via Java Deserialization
Mar 01, 2023
CVSS 9.8
EPSS 0.02
CVE-2022-37934 MEDIUM
HPE OfficeConnect 1820 and 1850 Switch Series - Remote Path Traversal
Jan 05, 2023
CVSS 6.8
EPSS 0.01
CVE-2022-37933 HIGH
HPE Superdome Flex and Superdome Flex 280 Firmware - Local Unauthorized Data Injection
Jan 05, 2023
CVSS 7.3
EPSS 0.00
CVE-2022-37932 HIGH NUCLEI
HPE OfficeConnect 1820, 1850, and 1920S - Authentication Bypass
Dec 12, 2022
CVSS 8.8
EPSS 0.72
CVE-2022-37930 MEDIUM
HPE Nimble Storage Hybrid Flash Arrays and Secondary Flash Arrays < 5.2.1.900 - Local Sensitive Information Exposure
Dec 12, 2022
CVSS 6.7
EPSS 0.00
CVE-2022-37929 MEDIUM
HPE Nimble Storage Arrays < 5.2.1.900 - Privilege Management Issue
Dec 12, 2022
CVSS 6.7
EPSS 0.00
CVE-2022-37928 HIGH
HPE Nimble Storage Hybrid/Secondary Flash Arrays < 5.2.1.900 Data Authenticity Verification Issue
Dec 12, 2022
CVSS 8.0
EPSS 0.00
CVE-2022-37927 MEDIUM
HPE OneView Global Dashboard < 2.7 - Open Redirect
Dec 12, 2022
CVSS 6.1
EPSS 0.00
CVE-2022-28640 HIGH
HPE iLO 5 2.71 - Local-Adjacent Arbitrary Code Execution
Sep 20, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-28639 HIGH
HPE Integrated Lights-Out 5 Firmware < 2.72 - Denial of Service and Arbitrary Code Execution
Sep 20, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-28638 HIGH
HPE iLO 5 <2.71 - Info Disclosure, RCE
Sep 20, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-28637 HIGH
HPE Integrated Lights-Out 5 Firmware < 2.72 - Local Denial of Service and Arbitrary Code Execution
Sep 20, 2022
CVSS 7.8
EPSS 0.00
CVE-2022-28636 HIGH
HPE Integrated Lights-Out 5 Firmware < 2.71 - Local Arbitrary Code Execution and Denial of Service
Aug 12, 2022
CVSS 7.4
EPSS 0.00
CVE-2022-28635 HIGH
HPE Integrated Lights-Out 5 Firmware < 2.71 - Local Arbitrary Code Execution and Denial of Service
Aug 12, 2022
CVSS 7.4
EPSS 0.00
CVE-2022-28634 MEDIUM
HPE iLO 5 <2.71 - Privileged Local Arbitrary Code Execution
Aug 12, 2022
CVSS 6.7
EPSS 0.00
CVE-2022-28633 HIGH
HPE iLO 5 < 2.71 - Unauthenticated Info Disclosure & Data Modification
Aug 12, 2022
CVSS 7.3
EPSS 0.00
CVE-2022-28632 HIGH
HPE Integrated Lights-Out 5 Firmware < 2.71 - Unauthenticated Remote Code Execution and Denial of Service
Aug 12, 2022
CVSS 8.8
EPSS 0.00
CVE-2022-28631 HIGH
HPE Integrated Lights-Out 5 Firmware < 2.71 - Unauthenticated Arbitrary Code Execution and Denial of Service
Aug 12, 2022
CVSS 8.8
EPSS 0.00
Products
integrated_lights-out_5_firmware 17 cloudline_cl3100_gen10_server_firmware 16 cloudline_cl4100_gen10_server_firmware 16 cloudline_cl5200_gen9_server_firmware 16 cloudline_cl5800_gen10_server_firmware 16 cloudline_cl5800_gen9_server_firmware 16 arubaos-cx 14 baseboard_management_controller 14 insight_remote_support 9 storeonce_system 8 autopass_license_server 7 hpux-ntp 7 nimbleos 6 oneview_global_dashboard 6 aruba_networking_private_5g_core 5 superdome_flex_server_firmware 5 HPE System Management Homepage before v7.6 4 smart_update_manager 4 arubaos-switch 3 hf20_firmware 3 hf20c_firmware 3 hf20h_firmware 3 hf40_firmware 3 hf40c_firmware 3 hf60_firmware 3 hf60c_firmware 3 oneview 3 serviceguard_for_linux 3 sf100_firmware 3 sf300_firmware 3
Quick Filters
Critical CVEs With Exploits In CISA KEV