Read the docs

Hewlett Packard Enterprise

Records2515All Threatist records
Exploited (KEV)7In CISA KEV
CVSS critical598CVSS 9.0–10.0
CVSS high951CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2015-07113 Adobe Flash Player Integer Overflow Vulnerability Priority CRITICAL 97KEV 2022-05-25TI-2015-02747 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2022-04-13TI-2005-02634 HP OpenView Network Node Manager Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-03-25TI-2012-01607 PHP-CGI Query String Parameter Vulnerability Priority CRITICAL 100KEV 2022-03-25TI-2013-04219 HP Multiple Products Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Intelligent Management Center 310 records HIGH Hp-ux 289 records CRITICAL Openview Network Node Manager 80 records CRITICAL System Management Homepage 78 records CRITICAL Instantos 56 records MEDIUM Xp7 Command View 53 records MEDIUM Systems Insight Manager 50 records CRITICAL Matrix Operating Environment 34 records CRITICAL

Records

17 records in Network Automation · all components

TI-2016-07009 CVE-2016-8511 · GHSA-g63c-vcx9-r7j7

Deserialization of untrusted data in Hewlett Packard Enterprise Network Automation

Priority MEDIUM 58

A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.15339 Published 2018-02-15 No fix listed CWE-502
TI-2016-01822 CVE-2016-1989 · GHSA-8x56-x28r-45xf

HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote…

Priority MEDIUM 55

HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-1988…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10551 Published 2016-03-15 No fix listed
TI-2016-01821 CVE-2016-1988 · GHSA-vp7m-qmc8-m9gv

HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote…

Priority MEDIUM 55

HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-1989…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10551 Published 2016-03-15 No fix listed
TI-2017-03752 CVE-2017-5814 · GHSA-2793-7v75-7pw5

SQL injection in Hewlett Packard Enterprise Network Automation

Priority MEDIUM 53

A remote sql injection authentication bypass in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08652 Published 2018-02-15 No fix listed CWE-89
TI-2017-03750 CVE-2017-5812 · GHSA-fpq6-h34c-r8qw

SQL injection in Hewlett Packard Enterprise Network Automation

Priority MEDIUM 41

A remote sql information disclosure vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05269 Published 2018-02-15 No fix listed CWE-89
TI-2018-04774 CVE-2018-6492 · GHSA-qwmh-j592-r53f

MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities

Priority LOW 30

Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01524 Published 2018-05-22 No fix listed CWE-79
Open these records in search →