Vulnerabilidades em Hewlett Packard Enterprise (HPE)

598 resultados
Análise Vexday

O portfólio de vulnerabilidades da Hewlett Packard Enterprise (HPE) soma 450 CVEs catalogadas, com taxa de exploração ativa abaixo da média geral do catálogo — apenas 1 entrada confirmada no CISA KEV (0,22% contra 0,45% da média). Ainda assim, a CVE-2025-37164 merece atenção imediata: com EPSS de 0,8973, ela concentra a maior probabilidade de exploração observada no portfólio e é a vulnerabilidade ativamente explorada hoje. O tipo de falha mais recorrente é CWE-77 (Command Injection), o que sugere riscos elevados de execução arbitrária de comandos em ambientes afetados. Com 57 CVEs críticas, 3 com prova de conceito pública e 33 vulnerabilidades surgidas nos últimos 90 dias, equipes de segurança devem manter ciclos de patch ativos e priorizar os ativos expostos a injeção de comandos.

CVE-2023-30909CRITICALA remote authentication bypass issue exists in some OneView APIs. EPSS 1.5%CVE-2024-42503HIGHAuthenticated Remote Command Execution (RCE) Vulnerability in the Lua Package Within the AOS Command Line Interface (CLI)EPSS 1.5%CVE-2024-42505CRITICALUnauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI ProtocolEPSS 1.5%CVE-2023-22765HIGHAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceEPSS 1.5%CVE-2023-22769HIGHAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceEPSS 1.5%CVE-2023-22763HIGHAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceEPSS 1.5%CVE-2023-22764HIGHAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceEPSS 1.5%CVE-2023-22768HIGHAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceEPSS 1.5%CVE-2023-22767HIGHAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceEPSS 1.5%CVE-2023-22762HIGHAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceEPSS 1.5%CVE-2023-22770HIGHAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceEPSS 1.5%CVE-2023-22766HIGHAuthenticated Remote Command Execution in the ArubaOS Command Line InterfaceEPSS 1.5%CVE-2024-31477HIGHMultiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilitiEPSS 1.5%CVE-2024-31476HIGHMultiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilitiEPSS 1.5%CVE-2026-76675CRITICALAuthenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN GatewaysEPSS 1.5%CVE-2025-37176MEDIUMAuthenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflowEPSS 1.4%CVE-2022-43538HIGHVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands onEPSS 1.4%CVE-2022-43537HIGHVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands onEPSS 1.4%CVE-2019-5406—A remote session reuse vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.EPSS 1.4%CVE-2024-42506CRITICALUnauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI ProtocolEPSS 1.4%