[ Vendor · 138 CVEs ]
Hewlett Packard Enterprise (HPE)
CVEs affecting Hewlett Packard Enterprise (HPE) published in the last 30 days, plus any Hewlett Packard Enterprise (HPE) CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-76754 | 6 Oct 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks… | |
| CVE-2026-79794 | 6 Oct 2026 | CVSS 9.1 | Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to… | |
| CVE-2026-76741 | 6 Oct 2026 | CVSS 6.5 | Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to… | |
| CVE-2026-76742 | 6 Oct 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote… | |
| CVE-2026-76743 | 6 Oct 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to… | |
| CVE-2026-76744 | 6 Oct 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to… | |
| CVE-2026-76745 | 6 Oct 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an… | |
| CVE-2026-76746 | 6 Oct 2026 | CVSS 9.3 | Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose… | |
| CVE-2026-79820 | 5 Oct 2026 | CVSS 9.0 | Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out (iLO) 7A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware. | |
| CVE-2026-76736 | 29 Sep 2026 | CVSS 3.3 | Hewlett Packard Enterprise (HPE) Instant ONA buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a… | |
| CVE-2026-76737 | 29 Sep 2026 | CVSS 3.0 | Hewlett Packard Enterprise (HPE) Instant ONAn authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow… | |
| CVE-2026-76738 | 29 Sep 2026 | CVSS 2.7 | Hewlett Packard Enterprise (HPE) Instant ONA buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with… | |
| CVE-2026-76729 | 29 Sep 2026 | CVSS 6.6 | Hewlett Packard Enterprise (HPE) Instant ONA format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges… | |
| CVE-2026-76730 | 29 Sep 2026 | CVSS 6.5 | Hewlett Packard Enterprise (HPE) Instant ONAn authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent… | |
| CVE-2026-76731 | 29 Sep 2026 | CVSS 6.5 | Hewlett Packard Enterprise (HPE) Instant ONAn authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to… | |
| CVE-2026-76732 | 29 Sep 2026 | CVSS 6.4 | Hewlett Packard Enterprise (HPE) Instant ONA local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this… | |
| CVE-2026-76733 | 29 Sep 2026 | CVSS 4.9 | Hewlett Packard Enterprise (HPE) Instant ONA denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with… | |
| CVE-2026-76734 | 29 Sep 2026 | CVSS 4.8 | Hewlett Packard Enterprise (HPE) Instant ONA memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a… | |
| CVE-2026-76735 | 29 Sep 2026 | CVSS 4.1 | Hewlett Packard Enterprise (HPE) Instant ONA sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation… | |
| CVE-2026-76721 | 29 Sep 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) Instant ONBuffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to… | |
| CVE-2026-76722 | 29 Sep 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) Instant ONUncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated… | |
| CVE-2026-76723 | 29 Sep 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Instant ONBuffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent… | |
| CVE-2026-76724 | 29 Sep 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Instant ONA command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker… | |
| CVE-2026-76725 | 29 Sep 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Instant ONA vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker… | |
| CVE-2026-76726 | 29 Sep 2026 | CVSS 8.1 | Hewlett Packard Enterprise (HPE) Instant ONAn authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass… | |
| CVE-2026-76727 | 29 Sep 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) Instant ONCommand injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with… | |
| CVE-2026-76728 | 29 Sep 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) Instant ONA vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a… | |
| CVE-2026-76717 | 22 Sep 2026 | CVSS 5.3 | Hewlett Packard Enterprise (HPE) ALEA vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive information. An unauthenticated… | Fix |
| CVE-2026-76716 | 22 Sep 2026 | CVSS 5.3 | Hewlett Packard Enterprise (HPE) ALEMultiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or denial of service. An… | Fix |
| CVE-2026-76715 | 22 Sep 2026 | CVSS 7.1 | Hewlett Packard Enterprise (HPE) ALEA vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-middle (MitM) attack. Successful… | Fix |
| CVE-2026-76714 | 22 Sep 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) ALEVulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary commands on the underlying… | Fix |
| CVE-2026-76712 | 22 Sep 2026 | CVSS 7.3 | Hewlett Packard Enterprise (HPE) ALEA vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information disclosure, or denial of… | Fix |
| CVE-2026-76713 | 22 Sep 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) ALEA vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability… | Fix |
| CVE-2026-76711 | 22 Sep 2026 | CVSS 7.5 | Hewlett Packard Enterprise (HPE) ALEA vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improperly processes incoming socket… | Fix |
| CVE-2026-76710 | 22 Sep 2026 | CVSS 7.5 | Hewlett Packard Enterprise (HPE) ALEA vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure of sensitive information. An… | Fix |
| CVE-2026-76708 | 22 Sep 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) ALEA vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-coded… | Fix |
| CVE-2026-76709 | 22 Sep 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) ALEA vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vulnerability… | Fix |
| CVE-2025-37164 | 16 Dec 2025 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) OneView Code InjectionA remote code execution issue exists in HPE OneView. | Exploited |
Page 2 of 2