Vulnerabilidades em Hewlett Packard Enterprise (HPE)

598 resultados
Análise Vexday

O portfólio de vulnerabilidades da Hewlett Packard Enterprise (HPE) soma 450 CVEs catalogadas, com taxa de exploração ativa abaixo da média geral do catálogo — apenas 1 entrada confirmada no CISA KEV (0,22% contra 0,45% da média). Ainda assim, a CVE-2025-37164 merece atenção imediata: com EPSS de 0,8973, ela concentra a maior probabilidade de exploração observada no portfólio e é a vulnerabilidade ativamente explorada hoje. O tipo de falha mais recorrente é CWE-77 (Command Injection), o que sugere riscos elevados de execução arbitrária de comandos em ambientes afetados. Com 57 CVEs críticas, 3 com prova de conceito pública e 33 vulnerabilidades surgidas nos últimos 90 dias, equipes de segurança devem manter ciclos de patch ativos e priorizar os ativos expostos a injeção de comandos.

CVE-2026-23812MEDIUMSecurity Boundary Bypass via Routing Node ImpersonationEPSS 0.1%CVE-2025-37149MEDIUMA potential out-of-bound reads vulnerability in HPE ProLiant RL300 Gen11 Server's UEFI firmware.EPSS 0.1%CVE-2025-37139MEDIUMVulnerability in AOS firmware allows for Authenticated Local malicious actor to Permanently Disable BootEPSS 0.1%CVE-2024-51764MEDIUMA security vulnerability has been identified in HPE Data Management Framework (DMF) Suite (CXFS). Depending on configuration, this vulnerabiEPSS 0.1%CVE-2024-51765MEDIUMA security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on configuration, this vulnerability mEPSS 0.1%CVE-2026-73740MEDIUMLocal Privilege Escalation in HPE Networking Fabric ComposerEPSS 0.1%CVE-2025-25041MEDIUMArbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows ClientEPSS 0.1%CVE-2025-37127HIGHAuthenticated Replay Attack contains Cryptographic VulnerabilityEPSS 0.1%CVE-2025-25040LOWFailure to Properly Enforce Port ACLs on CPU generated packets in CX 9300 SwitchesEPSS 0.1%CVE-2026-73729MEDIUMAuthenticated Sensitive Information Disclosure in HPE Networking Fabric ComposerEPSS 0.1%CVE-2026-73776HIGHAuthenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CXEPSS 0.1%CVE-2026-73725HIGHLocal Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric ComposerEPSS 0.1%CVE-2026-73732MEDIUMLocal Authenticated Sensitive Information Disclosure in HPE Networking Fabric ComposerEPSS 0.1%CVE-2026-73738MEDIUMAuthenticated Sensitive Information Disclosure in HPE Networking Fabric ComposerEPSS 0.1%CVE-2025-37155HIGHAuthenticated Privilege Escalation Allows Unauthorized Access in Network Management InterfaceEPSS 0.1%CVE-2026-76702MEDIUMAuthenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysEPSS 0.1%CVE-2026-73747LOWLocal Privilege Escalation Vulnerability in HPE Networking Fabric ComposerEPSS 0.1%CVE-2026-23601MEDIUMFrame Injection via Shared GTK Allows Traffic Spoofing and Client CompromiseEPSS 0.1%