Browse all 616 CVE security advisories affecting Hewlett Packard Enterprise (HPE). AI-powered Chinese analysis, POCs, and references for each vulnerability.
Hewlett Packard Enterprise (HPE) operates as a critical infrastructure provider, designing and selling servers, storage, networking hardware, and associated software solutions for enterprise data centers. With 418 recorded CVEs, the company’s attack surface primarily involves its managed services and hardware management interfaces. Historically, common vulnerability classes include remote code execution (RCE) and cross-site scripting (XSS), often stemming from web-based management consoles like HPE OneView or iLO. Privilege escalation flaws also appear frequently, allowing unauthorized users to gain administrative control over managed devices. Notable incidents have included credential exposure and insecure default configurations in firmware updates, which attackers exploited to pivot into internal networks. These weaknesses highlight the risks inherent in complex, interconnected enterprise ecosystems where management planes are often targeted. The high volume of vulnerabilities underscores the necessity for rigorous patch management and strict access controls across HPE’s extensive product portfolio to mitigate potential systemic breaches.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2023-45622 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 7.5 | High | 2023-11-14 |
| CVE-2023-45621 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 7.5 | High | 2023-11-14 |
| CVE-2023-45620 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 7.5 | High | 2023-11-14 |
| CVE-2023-45619 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 8.2 | High | 2023-11-14 |
| CVE-2023-45618 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 8.2 | High | 2023-11-14 |
| CVE-2023-45617 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 8.2 | High | 2023-11-14 |
| CVE-2023-45616 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 9.8 | Critical | 2023-11-14 |
| CVE-2023-45615 | Aruba Networks ArubaOS和InstantOS安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 9.8 | Critical | 2023-11-14 |
| CVE-2023-45614 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 9.8 | Critical | 2023-11-14 |
| CVE-2023-30912 | Hewlett Packard Enterprise OneView 安全漏洞 — HPE OneView | 7.2 | High | 2023-10-25 |
| CVE-2023-43510 | Authenticated Remote Command Injection in ClearPass Policy Manager Web-Based Management Interface Leading to Partial System Compromise — Aruba ClearPass Policy Manager | 4.7 | Medium | 2023-10-24 |
| CVE-2023-43509 | Unauthenticated Endpoint Allows Sending Arbitrary OnGuard Notifications — Aruba ClearPass Policy Manager | 5.8 | Medium | 2023-10-24 |
| CVE-2023-43508 | Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface — Aruba ClearPass Policy Manager | 6.3 | Medium | 2023-10-24 |
| CVE-2023-43507 | Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface — Aruba ClearPass Policy Manager | 7.2 | High | 2023-10-24 |
| CVE-2023-43506 | Local Privilege Escalation in ClearPass OnGuard Linux Agent — Aruba ClearPass Policy Manager | 7.8 | High | 2023-10-24 |
| CVE-2023-30911 | Hewlett Packard Enterprise Integrated Lights-Out 安全漏洞 — HPE Integrated Lights-Out | 6.8 | Medium | 2023-10-18 |
| CVE-2023-30909 | Hewlett Packard Enterprise OneView 安全漏洞 — HPE OneView | 9.8 | Critical | 2023-09-14 |
| CVE-2023-30908 | Hewlett Packard Enterprise OneView 安全漏洞 — HPE OneView | 9.8 | Critical | 2023-09-07 |
| CVE-2023-38486 | Hardware Root of Trust Bypass in 9200 and 9000 Series Controllers and Gateways — 9200 Series Mobility Controllers and SD-WAN Gateways, 9000 Series Mobility Controllers and SD-WAN Gateways | 7.7 | High | 2023-09-06 |
| CVE-2023-38485 | Multiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and Gateways — 9200 Series Mobility Controllers and SD-WAN Gateways, 9000 Series Mobility Controllers and SD-WAN Gateways | 8.0 | High | 2023-09-06 |
| CVE-2023-38484 | Multiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and Gateways — 9200 Series Mobility Controllers and SD-WAN Gateways, 9000 Series Mobility Controllers and SD-WAN Gateways | 8.0 | High | 2023-09-06 |
| CVE-2023-37440 | Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure — EdgeConnect SD-WAN Orchestrator | 5.5 | Medium | 2023-08-22 |
| CVE-2023-37439 | Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface — EdgeConnect SD-WAN Orchestrator | 6.1 | Medium | 2023-08-22 |
| CVE-2023-37438 | Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface — EdgeConnect SD-WAN Orchestrator | 6.5 | Medium | 2023-08-22 |
| CVE-2023-37437 | Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface — EdgeConnect SD-WAN Orchestrator | 6.5 | Medium | 2023-08-22 |
| CVE-2023-37436 | Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface — EdgeConnect SD-WAN Orchestrator | 6.5 | Medium | 2023-08-22 |
| CVE-2023-37435 | Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface — EdgeConnect SD-WAN Orchestrator | 6.5 | Medium | 2023-08-22 |
| CVE-2023-37434 | Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface — EdgeConnect SD-WAN Orchestrator | 6.5 | Medium | 2023-08-22 |
| CVE-2023-37433 | Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface — EdgeConnect SD-WAN Orchestrator | 6.5 | Medium | 2023-08-22 |
| CVE-2023-37432 | Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface — EdgeConnect SD-WAN Orchestrator | 6.5 | Medium | 2023-08-22 |
This page lists every published CVE security advisory associated with Hewlett Packard Enterprise (HPE). Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.