Vendor
Hewlett Packard Enterprise (hpe)
652 known vulnerabilities in products by Hewlett Packard Enterprise (hpe), 1 of them actively exploited (CISA KEV).
Key figures
652
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
119
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2024-53676 | Hewlett Packard Enterprise (HPE) HPE Insight Remote Support: Files or Directories Accessible to External Parties | 9.8 | |
| Critical | CVE-2024-26304 | Buffer Overflow (CVE-2024-26304) | 9.8 | |
| Critical | CVE-2024-26305 | Hewlett Packard Enterprise (HPE) Sd-wan: Buffer Overflow | 9.8 | |
| Critical | CVE-2024-33512 | Buffer Overflow (CVE-2024-33512) | 9.8 | |
| Critical | CVE-2024-33511 | Buffer Overflow (CVE-2024-33511) | 9.8 | |
| Medium | CVE-2026-76698 | Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways: Command Injection | 6.5 | |
| High | CVE-2024-53675 | Hewlett Packard Enterprise (HPE) HPE Insight Remote Support: XML Injection (aka Blind XPath Injection) | 7.3 | |
| High | CVE-2024-53674 | Hewlett Packard Enterprise (HPE) HPE Insight Remote Support: XML Injection (aka Blind XPath Injection) | 7.3 | |
| Critical | CVE-2026-76675 | Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways: Command Injection | 9.1 | |
| Critical | CVE-2019-5396 | Hewlett Packard Enterprise (HPE) HPE 3PAR Service Processor: Authentication Bypass | 9.4 | |
| Critical | CVE-2019-5402 | Hewlett Packard Enterprise (HPE) HPE 3PAR StoreServ Management and Core Software Media: security vulnerability | 9.4 | |
| Critical | CVE-2019-5397 | Hewlett Packard Enterprise (HPE) HPE 3PAR Service Processor: security vulnerability | 9.4 | |
| High | CVE-2026-79802 | Command Injection Vulnerability in the ClearPass Policy Manager Client Software | 8.8 | |
| Critical | CVE-2026-76724 | Hewlett Packard Enterprise (HPE) Instant ON: Command Injection | 9.6 | |
| Critical | CVE-2026-76674 | Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways: Buffer Overflow | 9.8 | |
| High | CVE-2026-73767 | Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface | 7.2 | |
| Critical | CVE-2024-42509 | Unauthenticated Command Injection Vulnerability in the CLI Service Accessed by the PAPI Protocol | 9.8 | |
| Critical | CVE-2023-45616 | HP Instantos: Buffer Overflow | 9.8 | |
| Critical | CVE-2023-45615 | HP Instantos: Buffer Overflow | 9.8 | |
| Critical | CVE-2023-45614 | HP Instantos: Buffer Overflow | 9.8 | |
| Critical | CVE-2022-37932 | HPE Officeconnect 1820 J9979a Firmware: Authentication Bypass | 8.8 | |
| High | CVE-2026-73766 | Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX | 7.2 | |
| Critical | CVE-2023-22779 | Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol | 9.8 | |
| High | CVE-2026-73722 | Hewlett Packard Enterprise (HPE) Fabric Composer: Command Injection | 7.2 |
News
- NCSC-2026-0413 [1.01] [M/H] Kwetsbaarheden verholpen in HPE Networking AOS-Switchncsc-nl,
- NCSC-2026-0413 [1.00] [M/H] Kwetsbaarheden verholpen in HPE Networking AOS-Switchncsc-nl,
- HPE Patches Critical RCE Vulnerabilities in AOS-CXsecurityweek,
- NCSC-2026-0339 [1.00] [M/H] Kwetsbaarheden verholpen in HPE Networking Fabric Composerncsc-nl,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,