Vulnerabilidades em Hewlett Packard Enterprise (HPE)

598 resultados
Análise Vexday

O portfólio de vulnerabilidades da Hewlett Packard Enterprise (HPE) soma 450 CVEs catalogadas, com taxa de exploração ativa abaixo da média geral do catálogo — apenas 1 entrada confirmada no CISA KEV (0,22% contra 0,45% da média). Ainda assim, a CVE-2025-37164 merece atenção imediata: com EPSS de 0,8973, ela concentra a maior probabilidade de exploração observada no portfólio e é a vulnerabilidade ativamente explorada hoje. O tipo de falha mais recorrente é CWE-77 (Command Injection), o que sugere riscos elevados de execução arbitrária de comandos em ambientes afetados. Com 57 CVEs críticas, 3 com prova de conceito pública e 33 vulnerabilidades surgidas nos últimos 90 dias, equipes de segurança devem manter ciclos de patch ativos e priorizar os ativos expostos a injeção de comandos.

CVE-2024-31467CRITICALUnauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI ProtocolEPSS 1.1%CVE-2024-31466CRITICALUnauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI ProtocolEPSS 1.1%CVE-2022-44534HIGHA vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authenticated users to run arbEPSS 1.1%CVE-2025-37093CRITICALAn authentication bypass vulnerability exists in HPE StoreOnce Software.EPSS 1.1%CVE-2023-37428HIGHAuthenticated Remote Code Execution via Path Traversal in EdgeConnect SD-WAN Orchestrator Web-Based Management InterfaceEPSS 1.1%CVE-2023-30502HIGHAuthenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line InterfaceEPSS 1.1%CVE-2023-30506HIGHAuthenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line InterfaceEPSS 1.1%CVE-2023-22753HIGHUnauthenticated Buffer Overflow Vulnerabilities in ArubaOS ProcessesEPSS 1.1%CVE-2023-22755HIGHUnauthenticated Buffer Overflow Vulnerabilities in ArubaOS ProcessesEPSS 1.1%CVE-2023-22757HIGHUnauthenticated Buffer Overflow Vulnerabilities in ArubaOS ProcessesEPSS 1.1%CVE-2023-22754HIGHUnauthenticated Buffer Overflow Vulnerabilities in ArubaOS ProcessesEPSS 1.1%CVE-2023-22756HIGHUnauthenticated Buffer Overflow Vulnerabilities in ArubaOS ProcessesEPSS 1.1%CVE-2026-76690HIGHAuthenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN GatewaysEPSS 1.1%CVE-2026-76674CRITICALUnauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN GatewaysEPSS 1.1%CVE-2026-73766HIGHAuthenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CXEPSS 1.1%CVE-2023-30503HIGHAuthenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line InterfaceEPSS 1.0%CVE-2023-30505HIGHAuthenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line InterfaceEPSS 1.0%CVE-2023-30504HIGHAuthenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line InterfaceEPSS 1.0%CVE-2023-30501HIGHAuthenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line InterfaceEPSS 1.0%CVE-2025-37103CRITICALHardcoded Credential Exposure Allows Unauthorized Access in Web InterfaceEPSS 1.0%