Vulnerabilities in Hewlett Packard Enterprise (HPE)

598 results
Vexday analysis

O portfólio de vulnerabilidades da Hewlett Packard Enterprise (HPE) soma 450 CVEs catalogadas, com taxa de exploração ativa abaixo da média geral do catálogo — apenas 1 entrada confirmada no CISA KEV (0,22% contra 0,45% da média). Ainda assim, a CVE-2025-37164 merece atenção imediata: com EPSS de 0,8973, ela concentra a maior probabilidade de exploração observada no portfólio e é a vulnerabilidade ativamente explorada hoje. O tipo de falha mais recorrente é CWE-77 (Command Injection), o que sugere riscos elevados de execução arbitrária de comandos em ambientes afetados. Com 57 CVEs críticas, 3 com prova de conceito pública e 33 vulnerabilidades surgidas nos últimos 90 dias, equipes de segurança devem manter ciclos de patch ativos e priorizar os ativos expostos a injeção de comandos.

CVE-2026-73745LOWUnauthenticated Limited Information Disclosure allows Data Exposure in the API of HPE Networking Fabric ComposerEPSS 0.3%CVE-2026-73758MEDIUMAuthenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CXEPSS 0.3%CVE-2025-37156MEDIUMArubaOS-CX Platform-Level Denial-of-Service VulnerabilityEPSS 0.3%CVE-2026-73730MEDIUMAuthenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer APIEPSS 0.3%CVE-2022-37928HIGHInsufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and NimbleEPSS 0.3%CVE-2026-73746LOWAuthenticated Denial of Service Vulnerability in HPE Networking Fabric Composer APIEPSS 0.3%CVE-2026-73733MEDIUMAuthentication Bypasses in API allow Continued Authenticated Access in HPE Networking Fabric ComposerEPSS 0.3%CVE-2026-73774HIGHUnauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CXEPSS 0.3%CVE-2026-73759MEDIUMUnauthenticated Denial-of-Service Vulnerabilities in AOS-CXEPSS 0.3%CVE-2026-73762MEDIUMAuthorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized AccessEPSS 0.3%CVE-2026-73772MEDIUMUnauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CXEPSS 0.3%CVE-2026-73744LOWAuthenticated Denial of Service Vulnerability in HPE Networking Fabric Composer Web-Based Management InterfaceEPSS 0.3%CVE-2026-23817MEDIUMUnauthenticated Open Redirect allows URL Manipulation in Web InterfaceEPSS 0.3%CVE-2025-37160MEDIUMAuthenticated Broken Access Control (BAC) in REST API Configuration ServiceEPSS 0.3%CVE-2026-73761MEDIUMUnauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CXEPSS 0.3%CVE-2026-76692HIGHUnauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysEPSS 0.3%CVE-2024-51773MEDIUMAuthenticated Stored Cross-Site Scripting (XSS) in HPE Aruba Networking ClearPass Policy Manager Web-based Management InterfaceEPSS 0.3%CVE-2025-27084MEDIUMReflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal (CP) of an AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-based Management InterfaceEPSS 0.3%CVE-2024-42396MEDIUMUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the AP Certificate Management Service Accessed by the PAPI ProtocolEPSS 0.3%CVE-2024-42397MEDIUMUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the AP Certificate Management Service Accessed by the PAPI ProtocolEPSS 0.3%