Read the docs

Hewlett Packard Enterprise (HPE)

Records928All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical166CVSS 9.0–10.0
CVSS high474CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise (HPE) records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

38 records in Edgeconnect Operating System · all components

Priority MEDIUM 51

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01014 Published 2026-09-15 No fix listed CWE-120
Priority MEDIUM 50

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00606 Published 2026-09-15 No fix listed CWE-287
Priority MEDIUM 40

Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00349 Published 2026-09-15 No fix listed CWE-121
Priority LOW 38

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain prec…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00589 Published 2026-09-15 No fix listed CWE-120
Priority LOW 37

A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what is authorized by the user's existing privilege le…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00353 Published 2026-09-15 No fix listed CWE-284
Priority LOW 35

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00479 Published 2026-09-15 No fix listed CWE-120
Priority LOW 35

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00383 Published 2026-09-15 No fix listed CWE-287
Load more
Open these records in search →