Vulnerabilidades em Hewlett Packard Enterprise (HPE)

588 resultados
Análise Vexday

O portfólio de vulnerabilidades da Hewlett Packard Enterprise (HPE) soma 450 CVEs catalogadas, com taxa de exploração ativa abaixo da média geral do catálogo — apenas 1 entrada confirmada no CISA KEV (0,22% contra 0,45% da média). Ainda assim, a CVE-2025-37164 merece atenção imediata: com EPSS de 0,8973, ela concentra a maior probabilidade de exploração observada no portfólio e é a vulnerabilidade ativamente explorada hoje. O tipo de falha mais recorrente é CWE-77 (Command Injection), o que sugere riscos elevados de execução arbitrária de comandos em ambientes afetados. Com 57 CVEs críticas, 3 com prova de conceito pública e 33 vulnerabilidades surgidas nos últimos 90 dias, equipes de segurança devem manter ciclos de patch ativos e priorizar os ativos expostos a injeção de comandos.

CVE-2023-43506HIGHLocal Privilege Escalation in ClearPass OnGuard Linux AgentEPSS 0.2%CVE-2026-73764HIGHAuthentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CXEPSS 0.2%CVE-2026-73788MEDIUMPrivilege Escalation in ClearPass OnGuard AgentEPSS 0.2%CVE-2026-73756MEDIUMUnauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API EndpointEPSS 0.2%CVE-2025-37104HIGHHPE Telco Service Orchestrator Software, Authenticated SQL InjectionEPSS 0.2%CVE-2023-38402HIGHArbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows ClientEPSS 0.2%CVE-2026-73709HIGHUnauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation ProcessEPSS 0.2%CVE-2022-37935MEDIUMHPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.EPSS 0.2%CVE-2026-73703HIGHUnauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management InterfaceEPSS 0.2%CVE-2026-73727MEDIUMAuthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer APIEPSS 0.2%CVE-2026-73761MEDIUMUnauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CXEPSS 0.2%CVE-2026-73759MEDIUMUnauthenticated Denial-of-Service Vulnerabilities in AOS-CXEPSS 0.2%CVE-2025-37108LOWHPE Telco Service Activator, Protection Mechanism FailureEPSS 0.2%CVE-2025-37109LOWHPE Telco Service Activator, Protection Mechanism FailureEPSS 0.2%CVE-2026-73707HIGHAuthenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer APIEPSS 0.2%CVE-2026-73731MEDIUMUnauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management InterfaceEPSS 0.2%CVE-2025-27080MEDIUMAuthenticated Sensitive Information Disclosure exposes Credentials in AOS-CX Command Line InterfaceEPSS 0.2%CVE-2023-28091MEDIUMHPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dumpEPSS 0.2%CVE-2026-76692HIGHUnauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysEPSS 0.2%CVE-2026-73774HIGHUnauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CXEPSS 0.2%