Hewlett Packard Enterprise

Records2515All Threatist records

Exploited (KEV)7In CISA KEV

CVSS critical598CVSS 9.0–10.0

CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2015-07113 Adobe Flash Player Integer Overflow Vulnerability CRITICAL 97KEV 2022-05-25 TI-2015-02747 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability CRITICAL 100KEV 2022-04-13 TI-2005-02634 HP OpenView Network Node Manager Remote Code Execution Vulnerability CRITICAL 100KEV 2022-03-25 TI-2012-01607 PHP-CGI Query String Parameter Vulnerability CRITICAL 100KEV 2022-03-25 TI-2013-04219 HP Multiple Products Remote Code Execution Vulnerability CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Intelligent Management Center 310 records HIGH Hp-ux 289 records CRITICAL Openview Network Node Manager 80 records CRITICAL System Management Homepage 78 records CRITICAL Instantos 56 records MEDIUM Xp7 Command View 53 records MEDIUM Systems Insight Manager 50 records CRITICAL Matrix Operating Environment 34 records CRITICAL

Records

11 records in Aruba Clearpass Policy Manager · all components

TI-2018-03923 CVE-2018-5390 · GHSA-grv8-gqh3-fmc9

Uncontrolled resource consumption in Linux Kernel

HIGH 71

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.71767 Published 2018-08-06 Partial fix CWE-400

TI-2017-03762 CVE-2017-5824 · GHSA-mw7h-785m-797f

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

MEDIUM 60

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.1927 Published 2018-02-15 No fix listed

TI-2018-05123 CVE-2018-7058 · GHSA-269j-j2cg-h6qp

Improper authentication in Hewlett Packard Enterprise Aruba ClearPass

MEDIUM 49

Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to gain administrator privileges on the system.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03886 Published 2018-08-06 No fix listed CWE-287

TI-2017-06487 CVE-2017-9001 · GHSA-5p2w-v6gp-wgcx

Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes…

MEDIUM 45

Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failures through SSH.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0731 Published 2018-08-06 Fixed in 6.6.8

TI-2017-03764 CVE-2017-5826 · GHSA-jq4p-r2rf-67fm

An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

MEDIUM 44

An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03315 Published 2018-02-15 No fix listed

TI-2017-03763 CVE-2017-5825 · GHSA-726q-hfcg-prvv

A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

MEDIUM 42

A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01847 Published 2018-02-15 No fix listed

TI-2018-05124 CVE-2018-7059 · GHSA-44c7-h9h2-wj6v

Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate…

MEDIUM 40

Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01113 Published 2018-08-06 No fix listed CWE-20

TI-2017-03766 CVE-2017-5828 · GHSA-8hw9-8jv7-793r

An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

LOW 39

An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01861 Published 2018-02-15 No fix listed CWE-611

TI-2017-03767 CVE-2017-5829 · GHSA-5h6v-9r92-r58g

An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

LOW 35

An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0059 Published 2018-02-15 No fix listed

TI-2017-06488 CVE-2017-9002 · GHSA-2xwj-rw2w-xr5q

Cross-site scripting in Hewlett Packard Enterprise Aruba ClearPass

LOW 29

All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00922 Published 2018-08-06 Fixed in v6.6.8 CWE-79

TI-2017-03765 CVE-2017-5827 · GHSA-7cx3-vj8r-gpvc

A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

LOW 26

A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00711 Published 2018-02-15 No fix listed CWE-79

Open these records in search →

Critical	598
High	951
Medium	866
Low	100
No CVSS	0