Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Hewlett Packard Enterprise (HPE) — Vulnerabilities & Security Advisories 616

Browse all 616 CVE security advisories affecting Hewlett Packard Enterprise (HPE). AI-powered Chinese analysis, POCs, and references for each vulnerability.

Hewlett Packard Enterprise (HPE) operates as a critical infrastructure provider, designing and selling servers, storage, networking hardware, and associated software solutions for enterprise data centers. With 418 recorded CVEs, the company’s attack surface primarily involves its managed services and hardware management interfaces. Historically, common vulnerability classes include remote code execution (RCE) and cross-site scripting (XSS), often stemming from web-based management consoles like HPE OneView or iLO. Privilege escalation flaws also appear frequently, allowing unauthorized users to gain administrative control over managed devices. Notable incidents have included credential exposure and insecure default configurations in firmware updates, which attackers exploited to pivot into internal networks. These weaknesses highlight the risks inherent in complex, interconnected enterprise ecosystems where management planes are often targeted. The high volume of vulnerabilities underscores the necessity for rigorous patch management and strict access controls across HPE’s extensive product portfolio to mitigate potential systemic breaches.

Found 46 results / 616 Clear Filters
Top products by Hewlett Packard Enterprise (HPE): Fabric Composer Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central AOS-CX EdgeConnect SD-WAN Gateways ArubaOS (AOS) Aruba ClearPass Policy Manager EdgeConnect SD-WAN Orchestrator HPE Aruba Networking Wireless Operating System (AOS) Aruba EdgeConnect Enterprise Software Instant On AOS-8 Instant and AOS-10 AP Aruba Access Points running InstantOS and ArubaOS 10 Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; Aruba EdgeConnect Enterprise Orchestration Software HPE OneView ALE HPE Aruba Networking ClearPass Policy Manager HPE Aruba Networking EdgeConnect SD-WAN Gateway HPE Athonet Core ClearPass Policy Manager (CPPM) HPE StoreOnce Software HPE 3PAR Service Processor ArubaOS Wi-Fi Controllers and Campus/Remote Access Points HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10 HPE Aruba Networking AOS Aruba OS HPE 3PAR StoreServ Management and Core Software Media HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 HPE Aruba Networking EdgeConnect SD-WAN HPE Aruba Networking Fabric Composer (AFC)
CVE ID Title CVSS Severity Published
CVE-2026-73752 Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX — AOS-CX 8.8 High 2026-09-01
CVE-2026-73751 Authenticated Remote Command Injection in AOS-CX Web-based Management Interface — AOS-CX 8.8 High 2026-09-01
CVE-2026-73750 Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution — AOS-CX 8.8 High 2026-09-01
CVE-2026-73749 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX — AOS-CX 9.8 Critical 2026-09-01
CVE-2026-63454 Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in AOS-CX — AOS-CX 7.2 High 2026-07-21
CVE-2026-63453 Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX — AOS-CX 7.2 High 2026-07-21
CVE-2026-44880 Low-Privilege Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX — AOS-CX 8.8 High 2026-07-21
CVE-2026-23817 Unauthenticated Open Redirect allows URL Manipulation in Web Interface — AOS-CX 6.5 Medium 2026-03-11
CVE-2026-23816 Authenticated Command Injection found in admin AOS-CX CLI command — AOS-CX 7.2 High 2026-03-11
CVE-2026-23815 Authenticated Command Injection found in AOS-CX Administrative CLI Command — AOS-CX 7.2 High 2026-03-11
CVE-2026-23814 Authenticated Command Injection found in AOS-CX CLI Command — AOS-CX 8.8 High 2026-03-11
CVE-2026-23813 Authentication Bypass in Web Interface allows Unauthenticated Admin Password Reset — AOS-CX 9.8 Critical 2026-03-11
CVE-2025-27080 Authenticated Sensitive Information Disclosure exposes Credentials in AOS-CX Command Line Interface — AOS-CX 6.0 Medium 2025-03-18
CVE-2025-25042 Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface — AOS-CX 4.3 Medium 2025-03-18
CVE-2025-25040 Failure to Properly Enforce Port ACLs on CPU generated packets in CX 9300 Switches — AOS-CX 3.3 Low 2025-03-18
CVE-2024-54010 Unauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switches — AOS-CX 3.4 Low 2025-01-08

This page lists every published CVE security advisory associated with Hewlett Packard Enterprise (HPE). Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.