Vulnerabilidades em Hewlett Packard Enterprise (HPE)

598 resultados
Análise Vexday

O portfólio de vulnerabilidades da Hewlett Packard Enterprise (HPE) soma 450 CVEs catalogadas, com taxa de exploração ativa abaixo da média geral do catálogo — apenas 1 entrada confirmada no CISA KEV (0,22% contra 0,45% da média). Ainda assim, a CVE-2025-37164 merece atenção imediata: com EPSS de 0,8973, ela concentra a maior probabilidade de exploração observada no portfólio e é a vulnerabilidade ativamente explorada hoje. O tipo de falha mais recorrente é CWE-77 (Command Injection), o que sugere riscos elevados de execução arbitrária de comandos em ambientes afetados. Com 57 CVEs críticas, 3 com prova de conceito pública e 33 vulnerabilidades surgidas nos últimos 90 dias, equipes de segurança devem manter ciclos de patch ativos e priorizar os ativos expostos a injeção de comandos.

CVE-2023-45624HIGHAn unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitatioEPSS 0.9%CVE-2023-37424HIGHUnauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management InterfaceEPSS 0.9%CVE-2025-37094MEDIUMA directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.EPSS 0.9%CVE-2026-76689HIGHAuthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN GatewaysEPSS 0.9%CVE-2023-22787HIGHUnauthenticated Denial of Service (DoS) in Aruba InstantOS or ArubaOS 10 Service Accessed via the PAPI ProtocolEPSS 0.8%CVE-2026-76714HIGHAuthenticated Remote Code Execution with Elevated Privileges Vulnerability in HPE Networking Analytics and Location Engine (ALE)EPSS 0.8%CVE-2026-23592HIGHInsecure File Handling allows Remote Code Execution in Backup FunctionalityEPSS 0.8%CVE-2026-44872HIGHAuthenticated Arbitrary File Upload via Command Injection in AOS-8 AND AOS-10 Web-Based Management InterfaceEPSS 0.8%CVE-2026-73787HIGHAuthenticated Arbitrary File Write allows Remote Code Execution via CPPM Web InterfaceEPSS 0.8%CVE-2022-43531HIGH Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SEPSS 0.8%CVE-2023-45627MEDIUMAn authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploitation of this vulnerability results in tEPSS 0.8%CVE-2023-43507HIGHAuthenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management InterfaceEPSS 0.8%CVE-2024-54008HIGHAuthenticated Remote Code Execution (RCE) in HPE Aruba Networking AirWave Management PlatformEPSS 0.8%CVE-2023-37433MEDIUMAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management InterfaceEPSS 0.8%CVE-2023-37432MEDIUMAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management InterfaceEPSS 0.8%CVE-2023-37431MEDIUMAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management InterfaceEPSS 0.8%CVE-2023-37430MEDIUMAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management InterfaceEPSS 0.8%CVE-2023-37429MEDIUMAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management InterfaceEPSS 0.8%CVE-2022-37936CRITICALUnauthenticated Java deserialization vulnerability in Serviceguard Manager EPSS 0.8%CVE-2023-37435MEDIUMAuthenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management InterfaceEPSS 0.8%