Browse all 616 CVE security advisories affecting Hewlett Packard Enterprise (HPE). AI-powered Chinese analysis, POCs, and references for each vulnerability.
Hewlett Packard Enterprise (HPE) operates as a critical infrastructure provider, designing and selling servers, storage, networking hardware, and associated software solutions for enterprise data centers. With 418 recorded CVEs, the company’s attack surface primarily involves its managed services and hardware management interfaces. Historically, common vulnerability classes include remote code execution (RCE) and cross-site scripting (XSS), often stemming from web-based management consoles like HPE OneView or iLO. Privilege escalation flaws also appear frequently, allowing unauthorized users to gain administrative control over managed devices. Notable incidents have included credential exposure and insecure default configurations in firmware updates, which attackers exploited to pivot into internal networks. These weaknesses highlight the risks inherent in complex, interconnected enterprise ecosystems where management planes are often targeted. The high volume of vulnerabilities underscores the necessity for rigorous patch management and strict access controls across HPE’s extensive product portfolio to mitigate potential systemic breaches.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2023-28091 | Hewlett Packard Enterprise OneView 安全漏洞 — HPE OneView | 5.5 | - | 2023-04-14 |
| CVE-2023-1168 | Authenticated Remote Code Execution in Aruba CX Switches — Aruba CX 10000 Switch Series, Aruba CX 9300 Switch Series, Aruba CX 8400 Switch Series, Aruba CX 8360 Switch Series, Aruba CX 8325 Switch Series, Aruba CX 8320 Switch Series, Aruba CX 6400 Switch Series, Aruba CX 6300 Switch Series, Aruba CX 6200F Switch Series | 7.2 | High | 2023-03-21 |
| CVE-2022-37940 | Hewlett Packard Enterprise FlexFabric 5700 Switch 输入验证错误漏洞 — HPE FlexFabric 5700 Switch Series | 5.3 | Medium | 2023-03-15 |
| CVE-2023-25596 | Authenticated Sensitive Information Disclosure in ClearPass Policy Manager — Aruba ClearPass Policy Manager | 4.5 | Medium | 2023-03-14 |
| CVE-2023-25595 | Sensitive Information Disclosure in ClearPass OnGuard Ubuntu Agent — Aruba ClearPass Policy Manager | 5.5 | Medium | 2023-03-14 |
| CVE-2023-25594 | Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface — Aruba ClearPass Policy Manager | 6.3 | Medium | 2023-03-14 |
| CVE-2023-25593 | Reflected Cross Site Scripting Vulnerabilities (XSS) in ClearPass Policy Manager Web-Based Management Interface — Aruba ClearPass Policy Manager | 7.1 | High | 2023-03-14 |
| CVE-2023-25592 | Reflected Cross Site Scripting Vulnerabilities (XSS) in ClearPass Policy Manager Web-Based Management Interface — Aruba ClearPass Policy Manager | 7.1 | High | 2023-03-14 |
| CVE-2023-25591 | Authenticated Information Disclosure in ClearPass Policy Manager Web-Based Management Interface — Aruba ClearPass Policy Manager | 7.6 | High | 2023-03-14 |
| CVE-2023-25590 | Local Privilege Escalation in ClearPass OnGuard Linux Agent — Aruba ClearPass Policy Manager | 7.8 | High | 2023-03-14 |
| CVE-2023-25589 | Unauthenticated Arbitrary User Creation Leads to Complete System Compromise — Aruba ClearPass Policy Manager | 9.8 | Critical | 2023-03-14 |
| CVE-2022-37939 | Hewlett Packard Enterprise Superdome Flex Server 信息泄露漏洞 — HPE Superdome Flex Servers; HPE Superdome Flex 280 Servers | 2.3 | Low | 2023-03-08 |
| CVE-2023-22778 | Authenticated Stored Cross-Site Scripting — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 4.8 | Medium | 2023-02-28 |
| CVE-2023-22777 | Authenticated Information Disclosure in ArubaOS Web-based Management Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 4.9 | Medium | 2023-02-28 |
| CVE-2023-22776 | Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Read — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 4.9 | Medium | 2023-02-28 |
| CVE-2023-22775 | Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 6.5 | Medium | 2023-02-28 |
| CVE-2023-22774 | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
| CVE-2023-22773 | Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion. — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
| CVE-2023-22772 | Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 6.5 | Medium | 2023-02-28 |
| CVE-2023-22771 | Insufficient Session Expiration in ArubaOS Command Line Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 6.8 | Medium | 2023-02-28 |
| CVE-2023-22770 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
| CVE-2023-22769 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
| CVE-2023-22768 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
| CVE-2023-22767 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
| CVE-2023-22766 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
| CVE-2023-22765 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
| CVE-2023-22764 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
| CVE-2023-22763 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
| CVE-2023-22762 | Authenticated Remote Command Execution in the ArubaOS Command Line Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
| CVE-2023-22761 | Authenticated Remote Command Execution in ArubaOS Web-based Management Interface — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 7.2 | High | 2023-02-28 |
This page lists every published CVE security advisory associated with Hewlett Packard Enterprise (HPE). Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.