Vulnerabilidades em Hewlett Packard Enterprise

363 resultados
Análise Vexday

O portfólio de vulnerabilidades catalogadas da Hewlett Packard Enterprise soma 311 CVEs, com taxa de exploração ativa abaixo da média geral do catálogo — nenhuma entrada confirmada no CISA KEV —, o que sugere menor pressão imediata de ameaças em curso. Ainda assim, a presença de 13 CVEs com prova de conceito pública e 3 de severidade crítica mantém a superfície de ataque relevante para equipes de gestão de risco. O destaque de atenção é CVE-2017-12542, com score EPSS de 0,9934, indicando probabilidade muito elevada de exploração, e associada ao tipo de falha mais recorrente no portfólio, CWE-78 (OS Command Injection), padrão que historicamente viabiliza execução remota de comandos com alto impacto. A ausência de novas CVEs nos últimos 90 dias reduz a pressão de remediação imediata, mas a antiguidade de vulnerabilidades de alto EPSS ainda ativas reforça a necessidade de revisão do inventário de ativos expostos.

CVE-2018-7060—Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could mEPSS 0.5%CVE-2024-51770HIGHAn information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17.EPSS 0.5%CVE-2024-51769HIGHAn information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17.EPSS 0.5%CVE-2024-22435HIGHHPE NonStop Web ViewPoint Enterprise software, Unauthorized accessEPSS 0.4%CVE-2024-42398MEDIUMUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI ProtocolEPSS 0.4%CVE-2024-42400MEDIUMUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI ProtocolEPSS 0.4%CVE-2024-42399MEDIUMUnauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI ProtocolEPSS 0.4%CVE-2024-22440MEDIUMHPE Compute Scale-up Server 3200 Server, Disclosure of Sensitive InformationEPSS 0.4%CVE-2025-27086HIGHA vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication.EPSS 0.4%CVE-2017-8985—HPE XP Storage using Hitachi Global Link Manager (HGLM) has a local authenticated information disclosure vulnerability in HGLM version HGLM EPSS 0.4%CVE-2017-12552—A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was foEPSS 0.4%CVE-2017-12547—A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.EPSS 0.4%CVE-2017-12548—A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.EPSS 0.4%CVE-2018-7099—A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploEPSS 0.4%CVE-2018-7094—A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA). The vulnerability may be exploited locEPSS 0.4%CVE-2017-12546—A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.EPSS 0.3%CVE-2026-79824HIGHHPE NonStop Python 3.x - Directory traversal vulnerabilityEPSS 0.3%CVE-2026-79842CRITICALAn authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713EPSS 0.3%CVE-2026-73798HIGHHPE NonStop DNS 9.2.3 Non Secure VersionEPSS 0.3%CVE-2026-73790HIGHHPE NonStop iTP WebServer - Memory corruption vulnerabilityEPSS 0.3%