Read the docs

Hewlett Packard Enterprise (HPE)

Records928All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical166CVSS 9.0–10.0
CVSS high474CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise (HPE) records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2025-25062 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Priority CRITICAL 100KEV 2026-01-07TI-2017-03684 Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability Priority CRITICAL 100KEV 2022-01-28

Components

Products in the NVD configurations · select one to filter the records
Arubaos-cx 57 records MEDIUM Edgeconnect Operating System 38 records MEDIUM Integrated Lights-out 5 Firmware 17 records MEDIUM Cloudline Cl3100 Gen10 Server Firmware 16 records LOW Cloudline Cl4100 Gen10 Server Firmware 16 records LOW Cloudline Cl5200 Gen9 Server Firmware 16 records LOW Cloudline Cl5800 Gen10 Server Firmware 16 records LOW Cloudline Cl5800 Gen9 Server Firmware 16 records LOW

Records

928 records

TI-2015-04610 CVE-2015-5477 · GHSA-4622-vjcx-p39j

Assertion failure in ISC BIND named via TKEY queries

Priority CRITICAL 92KEV

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99584 Published 2015-07-29 Partial fix CWE-617
TI-2024-17385 CVE-2024-26304 · GHSA-w7hg-wrfg-cf9f

Stack-based buffer overflow in Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor…

Priority HIGH 78

There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.44272 Published 2024-05-01 No fix listed CWE-121
TI-2026-19184 CVE-2026-23818 · GHSA-28r5-hvrv-cvq5

Open Redirect Vulnerability in HPE Aruba Networking Private 5G Core On-Prem

Priority HIGH 76

A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the login flow using a cra…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00326 Published 2026-04-07 No fix listed CWE-601
TI-2024-17386 CVE-2024-26305 · GHSA-gm2r-qgvq-g985

Stack-based buffer overflow in Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor…

Priority HIGH 65

There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15163 Published 2024-05-01 No fix listed CWE-121
TI-2024-22105 CVE-2024-33512 · GHSA-57gw-c6xj-3hcc

Stack-based buffer overflow in Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor…

Priority MEDIUM 64

There is a buffer overflow vulnerability in the underlying Local User Authentication Database service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Ar…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14617 Published 2024-05-01 No fix listed CWE-121
TI-2024-22104 CVE-2024-33511 · GHSA-vrmc-7fqr-49c6

Stack-based buffer overflow in Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor…

Priority MEDIUM 64

There is a buffer overflow vulnerability in the underlying Automatic Reporting service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access po…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14559 Published 2024-05-01 No fix listed CWE-121
TI-2002-02356 CVE-2002-20001 · GHSA-jx4r-qc68-xjr5

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side)…

Priority MEDIUM 54

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculati…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.24639 Published 2021-11-11 No fix listed CWE-400
TI-2024-28476 CVE-2024-42509 · GHSA-66rq-9x8p-ghcr

Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI Protocol

Priority MEDIUM 53

Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01966 Published 2024-11-05 No fix listed CWE-77
TI-2023-24417 CVE-2023-45616 · GHSA-9v9w-8c52-9ffj

Buffer overflow in Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 Series; 103…

Priority MEDIUM 53

There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point m…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
TI-2023-24416 CVE-2023-45615 · GHSA-3p88-x42x-8hrq

Buffer overflow in Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 Series; 103…

Priority MEDIUM 53

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
TI-2023-24415 CVE-2023-45614 · GHSA-x22v-rrfp-9cqh

Buffer overflow in Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 Series; 103…

Priority MEDIUM 53

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02132 Published 2023-11-14 No fix listed CWE-120
TI-2023-18042 CVE-2023-35982 · GHSA-vpmc-64g7-3jvf

Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
TI-2023-18041 CVE-2023-35981 · GHSA-r799-cqfw-5v59

Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
TI-2023-18040 CVE-2023-35980 · GHSA-7p6w-53mv-gf54

Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-07-25 No fix listed CWE-120
TI-2023-08953 CVE-2023-22780 · GHSA-vm8j-5gj2-mf44

Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2023-05-08 No fix listed CWE-120
TI-2023-08952 CVE-2023-22779 · GHSA-98m5-rjgx-wv8j

Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

Priority MEDIUM 53

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02118 Published 2023-05-08 No fix listed CWE-120
Load more
Open these records in search →