Hewlett Packard Enterprise (HPE)

Records928All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical166CVSS 9.0–10.0

CVSS high474CVSS 7.0–8.9

Exploited now

Hewlett Packard Enterprise (HPE) records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2025-25062 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability CRITICAL 100KEV 2026-01-07 TI-2017-03684 Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability CRITICAL 100KEV 2022-01-28

Components

Products in the NVD configurations · select one to filter the records

Arubaos-cx 57 records MEDIUM Edgeconnect Operating System 38 records MEDIUM Integrated Lights-out 5 Firmware 17 records MEDIUM Cloudline Cl3100 Gen10 Server Firmware 16 records LOW Cloudline Cl4100 Gen10 Server Firmware 16 records LOW Cloudline Cl5200 Gen9 Server Firmware 16 records LOW Cloudline Cl5800 Gen10 Server Firmware 16 records LOW Cloudline Cl5800 Gen9 Server Firmware 16 records LOW

Records

8 records in Storeonce System · all components

TI-2025-25005 CVE-2025-37093 · GHSA-g9qh-c549-gj4x

An authentication bypass vulnerability exists in HPE StoreOnce Software.

MEDIUM 51

An authentication bypass vulnerability exists in HPE StoreOnce Software.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01151 Published 2025-06-02 Fixed in 4.3.11 CWE-287

TI-2025-25003 CVE-2025-37091 · GHSA-fjvj-35hf-j5xm

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

MEDIUM 45

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01284 Published 2025-06-02 Fixed in 4.3.11 CWE-77

TI-2025-25006 CVE-2025-37094 · GHSA-pf22-rv2m-7xj7

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.

MEDIUM 41

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00882 Published 2025-06-02 Fixed in 4.3.11 CWE-22

TI-2025-25008 CVE-2025-37096 · GHSA-9wp5-wrc6-28r7

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

LOW 38

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.01315 Published 2025-06-02 Fixed in 4.3.11 CWE-77

TI-2025-25004 CVE-2025-37092 · GHSA-qxm6-r385-gmwp

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

LOW 38

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.01316 Published 2025-06-02 Fixed in 4.3.11 CWE-77

TI-2025-25001 CVE-2025-37089 · GHSA-qw96-3vm7-2xqg

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

LOW 38

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.01316 Published 2025-06-02 Fixed in 4.3.11 CWE-77

TI-2025-25002 CVE-2025-37090 · GHSA-qj64-gvr6-h7qx

A server-side request forgery vulnerability exists in HPE StoreOnce Software.

LOW 37

A server-side request forgery vulnerability exists in HPE StoreOnce Software.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00648 Published 2025-06-02 Fixed in 4.3.11 CWE-918

TI-2025-25007 CVE-2025-37095 · GHSA-33vg-fjg5-6p64

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software.

LOW 29

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.01212 Published 2025-06-02 Fixed in 4.3.11 CWE-22

Open these records in search →

Critical	166
High	474
Medium	268
Low	20
No CVSS	0