Vulnerabilidades em Hewlett Packard Enterprise (HPE)

588 resultados
Análise Vexday

O portfólio de vulnerabilidades da Hewlett Packard Enterprise (HPE) soma 450 CVEs catalogadas, com taxa de exploração ativa abaixo da média geral do catálogo — apenas 1 entrada confirmada no CISA KEV (0,22% contra 0,45% da média). Ainda assim, a CVE-2025-37164 merece atenção imediata: com EPSS de 0,8973, ela concentra a maior probabilidade de exploração observada no portfólio e é a vulnerabilidade ativamente explorada hoje. O tipo de falha mais recorrente é CWE-77 (Command Injection), o que sugere riscos elevados de execução arbitrária de comandos em ambientes afetados. Com 57 CVEs críticas, 3 com prova de conceito pública e 33 vulnerabilidades surgidas nos últimos 90 dias, equipes de segurança devem manter ciclos de patch ativos e priorizar os ativos expostos a injeção de comandos.

CVE-2026-19766CRITICALAuthentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric ComposerEPSS 0.3%CVE-2026-73736MEDIUMUnauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric ComposerEPSS 0.3%CVE-2026-76704MEDIUMAuthenticated Stored Cross-Site Scripting (XSS) Vulnerability in EdgeConnect SD-WAN Orchestrator Web-Based Management InterfaceEPSS 0.2%CVE-2025-27079MEDIUMArbitrary File Creation vulnerability allows for Authenticated Remote Code Execution in CLI InterfaceEPSS 0.2%CVE-2026-76676HIGHUnauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN GatewaysEPSS 0.2%CVE-2023-22791MEDIUMAruba InstantOS and ArubaOS 10 Sensitive Information DisclosureEPSS 0.2%CVE-2024-54010LOWUnauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switchesEPSS 0.2%CVE-2023-28092MEDIUMA potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system beinEPSS 0.2%CVE-2026-73728MEDIUMAuthenticated Denial of Service Vulnerabilities in HPE Networking Fabric Composer APIEPSS 0.2%CVE-2026-73724HIGHAuthenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric ComposerEPSS 0.2%CVE-2026-73734MEDIUMUnauthenticated Open Redirect allows URL Manipulation in HPE Networking Fabric Composer Web InterfaceEPSS 0.2%CVE-2026-73755MEDIUMPrivilege Escalation via Unauthorized Access to Sensitive Session InformationEPSS 0.2%CVE-2025-23060MEDIUMSensitive Data Exposure Vulnerability in HPE Aruba Networking ClearPass Policy Manager (CPPM)EPSS 0.2%CVE-2026-73714HIGHAuthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer APIEPSS 0.2%CVE-2026-73758MEDIUMAuthenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CXEPSS 0.2%CVE-2023-38401HIGHLocal Privilege Escalation in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows ClientEPSS 0.2%CVE-2026-73762MEDIUMAuthorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized AccessEPSS 0.2%CVE-2022-43533HIGH A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A suEPSS 0.2%CVE-2022-43534HIGHA vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A sucEPSS 0.2%CVE-2025-37129MEDIUMAuthenticated Remote Code Execution allows Exploit in Scripts FeatureEPSS 0.2%