Vulnerabilidades em Hewlett Packard Enterprise (HPE)

450 resultados
Análise Vexday

O portfólio de vulnerabilidades da Hewlett Packard Enterprise (HPE) soma 450 CVEs catalogadas, com taxa de exploração ativa abaixo da média geral do catálogo — apenas 1 entrada confirmada no CISA KEV (0,22% contra 0,45% da média). Ainda assim, a CVE-2025-37164 merece atenção imediata: com EPSS de 0,8973, ela concentra a maior probabilidade de exploração observada no portfólio e é a vulnerabilidade ativamente explorada hoje. O tipo de falha mais recorrente é CWE-77 (Command Injection), o que sugere riscos elevados de execução arbitrária de comandos em ambientes afetados. Com 57 CVEs críticas, 3 com prova de conceito pública e 33 vulnerabilidades surgidas nos últimos 90 dias, equipes de segurança devem manter ciclos de patch ativos e priorizar os ativos expostos a injeção de comandos.

CVE-2022-43540MEDIUMA vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtaEPSS 0.2%CVE-2023-28088HIGHAn HPE OneView appliance dump may expose SAN switch administrative credentialsEPSS 0.2%CVE-2023-28090MEDIUMAn HPE OneView appliance dump may expose SNMPv3 read credentialsEPSS 0.2%CVE-2023-28086MEDIUMAn HPE OneView appliance dump may expose proxy credential settingsEPSS 0.2%CVE-2023-28087MEDIUMAn HPE OneView appliance dump may expose OneView user accountsEPSS 0.2%CVE-2023-28089HIGHAn HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect ModulesEPSS 0.2%CVE-2023-30905—The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced privilege.EPSS 0.2%CVE-2022-37930MEDIUMA security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which cEPSS 0.2%CVE-2024-42508MEDIUMThis vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users.EPSS 0.2%CVE-2023-25595MEDIUMSensitive Information Disclosure in ClearPass OnGuard Ubuntu AgentEPSS 0.2%CVE-2023-30904—A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information.EPSS 0.2%CVE-2025-37186HIGHLocal Privilege Escalation Vulnerability in HPE Aruba Networking Virtual Intranet Access (VIA) Client for LinuxEPSS 0.2%CVE-2026-23811MEDIUMUnauthorized Bi-Directional Traffic Interception via L2/L3 ManipulationEPSS 0.2%CVE-2025-27087MEDIUMA vulnerability in the kernel of the Cray Operating System (COS) could allow an attacker to perform a local Denial of Service (DoS) attack.EPSS 0.2%CVE-2023-30906HIGHThe vulnerability could be locally exploited to allow escalation of privilege. EPSS 0.1%CVE-2026-23812MEDIUMSecurity Boundary Bypass via Routing Node ImpersonationEPSS 0.1%CVE-2022-37929MEDIUMImproper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary FlEPSS 0.1%CVE-2024-51765MEDIUMA security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on configuration, this vulnerability mEPSS 0.1%CVE-2024-51764MEDIUMA security vulnerability has been identified in HPE Data Management Framework (DMF) Suite (CXFS). Depending on configuration, this vulnerabiEPSS 0.1%CVE-2026-23599HIGHLocal Privilege Escalation Vulnerability in HPE Aruba Networking Clear Pass Policy Manager OnGuard for LinuxEPSS 0.1%