Browse all 616 CVE security advisories affecting Hewlett Packard Enterprise (HPE). AI-powered Chinese analysis, POCs, and references for each vulnerability.
Hewlett Packard Enterprise (HPE) operates as a critical infrastructure provider, designing and selling servers, storage, networking hardware, and associated software solutions for enterprise data centers. With 418 recorded CVEs, the company’s attack surface primarily involves its managed services and hardware management interfaces. Historically, common vulnerability classes include remote code execution (RCE) and cross-site scripting (XSS), often stemming from web-based management consoles like HPE OneView or iLO. Privilege escalation flaws also appear frequently, allowing unauthorized users to gain administrative control over managed devices. Notable incidents have included credential exposure and insecure default configurations in firmware updates, which attackers exploited to pivot into internal networks. These weaknesses highlight the risks inherent in complex, interconnected enterprise ecosystems where management planes are often targeted. The high volume of vulnerabilities underscores the necessity for rigorous patch management and strict access controls across HPE’s extensive product portfolio to mitigate potential systemic breaches.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-41136 | Authenticated Command Injection in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface — HPE Aruba Networking EdgeConnect SD-WAN | 6.8 | Medium | 2024-07-24 |
| CVE-2024-41135 | Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface — HPE Aruba Networking EdgeConnect SD-WAN | 7.2 | High | 2024-07-24 |
| CVE-2024-41134 | Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface — HPE Aruba Networking EdgeConnect SD-WAN | 7.2 | High | 2024-07-24 |
| CVE-2024-41133 | Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface — HPE Aruba Networking EdgeConnect SD-WAN | 7.2 | High | 2024-07-24 |
| CVE-2024-33519 | Authenticated Server-Side prototype pollution Leading to Information Disclosure — HPE Aruba Networking EdgeConnect SD-WAN | 7.2 | High | 2024-07-24 |
| CVE-2024-22442 | Hewlett Packard Enterprise 3PAR Service Processor 安全漏洞 — HPE 3PAR Service Processor | 9.8 | Critical | 2024-07-16 |
| CVE-2024-6206 | Hewlett Packard Enterprise Athonet Mobile Core 安全漏洞 — HPE Athonet Mobile Core | 7.5 | High | 2024-06-25 |
| CVE-2024-22441 | Hewlett Packard Enterprise Cray Parallel Application Launch Service 安全漏洞 — Cray System Management Software - PALS | 8.4AI | High AI | 2024-06-13 |
| CVE-2024-31483 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 4.9 | Medium | 2024-05-14 |
| CVE-2024-31482 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 5.3 | Medium | 2024-05-14 |
| CVE-2024-31481 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 5.3 | Medium | 2024-05-14 |
| CVE-2024-31480 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 5.3 | Medium | 2024-05-14 |
| CVE-2024-31479 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 5.3 | Medium | 2024-05-14 |
| CVE-2024-31478 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 5.3 | Medium | 2024-05-14 |
| CVE-2024-31477 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 7.2 | High | 2024-05-14 |
| CVE-2024-31476 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 7.2 | High | 2024-05-14 |
| CVE-2024-31475 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 8.2 | High | 2024-05-14 |
| CVE-2024-31474 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 8.2 | High | 2024-05-14 |
| CVE-2024-31473 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-31472 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-31471 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-31470 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-31469 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-31468 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-31467 | Unauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-31466 | Unauthenticated Buffer Overflow Vulnerabilities in CLI Service Accessed by the PAPI Protocol — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-33518 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 5.3 | Medium | 2024-05-01 |
| CVE-2024-33517 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 5.3 | Medium | 2024-05-01 |
| CVE-2024-33516 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 5.3 | Medium | 2024-05-01 |
| CVE-2024-33515 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 5.3 | Medium | 2024-05-01 |
This page lists every published CVE security advisory associated with Hewlett Packard Enterprise (HPE). Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.