Vulnerabilidades em Hewlett Packard Enterprise

363 resultados
Análise Vexday

O portfólio de vulnerabilidades catalogadas da Hewlett Packard Enterprise soma 311 CVEs, com taxa de exploração ativa abaixo da média geral do catálogo — nenhuma entrada confirmada no CISA KEV —, o que sugere menor pressão imediata de ameaças em curso. Ainda assim, a presença de 13 CVEs com prova de conceito pública e 3 de severidade crítica mantém a superfície de ataque relevante para equipes de gestão de risco. O destaque de atenção é CVE-2017-12542, com score EPSS de 0,9934, indicando probabilidade muito elevada de exploração, e associada ao tipo de falha mais recorrente no portfólio, CWE-78 (OS Command Injection), padrão que historicamente viabiliza execução remota de comandos com alto impacto. A ausência de novas CVEs nos últimos 90 dias reduz a pressão de remediação imediata, mas a antiguidade de vulnerabilidades de alto EPSS ainda ativas reforça a necessidade de revisão do inventário de ativos expostos.

CVE-2026-73792LOWHPE NonStop Java JToolkit - Command Injection and buffer overflow vulnerabilityEPSS 0.3%CVE-2017-12550—A local security misconfiguration vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.EPSS 0.3%CVE-2017-12553—A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.EPSS 0.3%CVE-2017-12549—A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.EPSS 0.3%CVE-2026-76659HIGHHPE NonStop TCP/IP UTILITIES - Denial of Service vulnerabilityEPSS 0.3%CVE-2024-22444MEDIUMA vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflEPSS 0.3%CVE-2026-73784HIGHHPE IceWall products, Remote Bypass of Security RestrictionsEPSS 0.3%CVE-2025-37101HIGHHPE OneView for VMware vCenter (OV4VC), Local Elevation of PrivilegeEPSS 0.3%CVE-2022-37909MEDIUMAruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs. The sceEPSS 0.3%CVE-2026-79829HIGHHPE NonStop HTTP WEBSERVER - Memory corruption vulnerabilityEPSS 0.3%CVE-2024-11856LOWHPE IceWall Products, Remote Unauthorized Data ModificationEPSS 0.3%CVE-2022-37908MEDIUMAn authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromEPSS 0.3%CVE-2026-73793HIGHHPE NonStop Middleware - Secret key handling vulnerabilityEPSS 0.3%CVE-2026-76663HIGHHPE NonStop TELSERV - Memory corruption vulnerabilityEPSS 0.3%CVE-2026-73799HIGHHPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerabilityEPSS 0.3%CVE-2026-79833HIGHHPE NonStop ANSI SQLUTIL - Denial of Service vulnerabilityEPSS 0.3%CVE-2026-76739MEDIUMHPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server, Remote RMC file modificationEPSS 0.2%CVE-2026-79821HIGHHPE NonStop SOAP 4.0 - Memory corruptionEPSS 0.2%CVE-2026-76662MEDIUMHPE NonStop TELSERV - Memory corruption vulnerabilityEPSS 0.2%CVE-2025-27081MEDIUMHPE NonStop OSM Service Connection Suite, Denial of Service vulnerabilityEPSS 0.2%