VYPR

Vendor CVEs

HPE

All CVEs

938 total · sorted by risk
  • CVE-2025-37164CriKEVDec 16, 2025
    risk 0.87cvss 10.0epss 0.90

    A remote code execution issue exists in HPE OneView.

  • CVE-2017-5689CriKEVMay 2, 2017
    risk 0.86cvss 9.8epss 0.92

    An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged…

  • CVE-2017-12542CriFeb 15, 2018
    risk 0.76cvss 10.0epss 0.99

    A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.

  • CVE-2017-5816CriFeb 15, 2018
    risk 0.74cvss 9.8epss 0.86

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

  • CVE-2016-2004CriApr 21, 2016
    risk 0.74cvss 9.8epss 0.94

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.

  • CVE-2020-7200CriDec 18, 2020
    risk 0.73cvss 9.8epss 0.82

    A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerability could be exploited to allow remote code execution.

  • CVE-2017-5817CriFeb 15, 2018
    risk 0.73cvss 9.8epss 0.83

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

  • CVE-2017-12557CriFeb 15, 2018
    risk 0.73cvss 9.8epss 0.80

    A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.

  • CVE-2020-7136CriApr 30, 2020
    risk 0.70cvss 9.8epss 0.80

    A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard Enterprise has provided a software update to resolve this vulnerability in HPE Smart Update Manager (SUM) prior to 8.5.6. Please visit the…

  • CVE-2019-11945CriJun 5, 2019
    risk 0.70cvss 9.8epss 0.79

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  • CVE-2021-29203CriMay 6, 2021
    risk 0.69cvss 9.8epss 0.68

    A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of…

  • CVE-2017-5815CriFeb 15, 2018
    risk 0.69cvss 9.8epss 0.34

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

  • CVE-2017-5792CriFeb 15, 2018
    risk 0.69cvss 9.8epss 0.34

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.

  • CVE-2017-5791CriOct 11, 2017
    risk 0.69cvss 9.8epss 0.69

    The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI.

  • CVE-2024-53676CriNov 27, 2024
    risk 0.68cvss 9.8epss 0.51

    A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.

  • CVE-2017-12558CriFeb 15, 2018
    risk 0.67cvss 9.8epss 0.38

    A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.

  • CVE-2017-12556CriFeb 15, 2018
    risk 0.67cvss 9.8epss 0.38

    A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.

  • CVE-2018-7114CriDec 3, 2018
    risk 0.66cvss 9.8epss 0.33

    HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.

  • CVE-2017-5806CriFeb 15, 2018
    risk 0.66cvss 9.8epss 0.22

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.

  • CVE-2017-5805CriFeb 15, 2018
    risk 0.66cvss 9.8epss 0.22

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.

  • CVE-2017-5804CriFeb 15, 2018
    risk 0.66cvss 9.8epss 0.22

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.

  • CVE-2017-12561CriFeb 15, 2018
    risk 0.66cvss 9.8epss 0.31

    A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT version Plat 7.3 E0504P4 and earlier was found.

  • CVE-2016-8519CriFeb 15, 2018
    risk 0.66cvss 9.8epss 0.28

    A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to v10.70 was found.

  • CVE-2016-1985CriJan 30, 2016
    risk 0.66cvss 10.0epss 0.07

    HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

  • CVE-2021-29212CriNov 1, 2021
    risk 0.65cvss 9.8epss 0.13

    A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versions 1.80, 1.81, 1.90 and 1.95. The vulnerability could be remotely exploited to allow an unauthenticated user to run arbitrary code leading complete impact to…

  • CVE-2021-25140CriFeb 9, 2021
    risk 0.65cvss 9.8epss 0.12

    A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500…

  • CVE-2020-24648CriOct 19, 2020
    risk 0.65cvss 9.8epss 0.11

    A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

  • CVE-2017-10992CriMar 10, 2020
    risk 0.65cvss 9.8epss 0.10

    In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request to invoker/JMXInvokerServlet, aka PSRT110461.

  • CVE-2019-5356CriJun 5, 2019
    risk 0.65cvss 9.8epss 0.11

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  • CVE-2019-11944CriJun 5, 2019
    risk 0.65cvss 9.8epss 0.13

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  • CVE-2018-7076CriOct 17, 2018
    risk 0.65cvss 9.8epss 0.12

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04.

  • CVE-2018-7074CriAug 6, 2018
    risk 0.65cvss 9.8epss 0.17

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P07. The vulnerability was resolved in iMC PLAT 7.3 E0605P04 or subsequent version.

  • CVE-2016-4391CriAug 6, 2018
    risk 0.65cvss 9.8epss 0.20

    A remote code execution security vulnerability has been identified in all versions of the HP ArcSight WINC Connector prior to v7.3.0.

  • CVE-2017-5823CriFeb 15, 2018
    risk 0.65cvss 9.8epss 0.18

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

  • CVE-2017-5821CriFeb 15, 2018
    risk 0.65cvss 9.8epss 0.17

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

  • CVE-2017-5820CriFeb 15, 2018
    risk 0.65cvss 9.8epss 0.18

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

  • CVE-2017-5819CriFeb 15, 2018
    risk 0.65cvss 9.8epss 0.18

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

  • CVE-2017-5807CriFeb 15, 2018
    risk 0.65cvss 9.8epss 0.22

    A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

  • CVE-2017-5790CriFeb 15, 2018
    risk 0.65cvss 9.8epss 0.18

    A remote deserialization of untrusted data vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found.

  • CVE-2016-8511CriFeb 15, 2018
    risk 0.65cvss 9.8epss 0.15

    A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.00.01, v10.00.02, v10.10, v10.11, v10.11.01, v10.20 was found.

  • CVE-2017-5789CriOct 11, 2017
    risk 0.65cvss 9.8epss 0.18

    HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unspecified vectors. At least in LoadRunner, this is a libxdrutil.dll mxdr_string heap-based buffer overflow.

  • CVE-2016-8205CriJan 14, 2017
    risk 0.65cvss 9.8epss 0.13

    A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.

  • CVE-2016-4359CriJun 8, 2016
    risk 0.65cvss 9.8epss 0.16

    Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch…

  • CVE-2016-2007CriApr 21, 2016
    risk 0.65cvss 9.8epss 0.20

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354.

  • CVE-2016-2006CriApr 21, 2016
    risk 0.65cvss 9.8epss 0.20

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3353.

  • CVE-2016-2005CriApr 21, 2016
    risk 0.65cvss 9.8epss 0.20

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352.

  • CVE-2016-1995CriMar 18, 2016
    risk 0.65cvss 9.8epss 0.10

    HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2016-1989CriMar 15, 2016
    risk 0.65cvss 9.8epss 0.11

    HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-1988.

  • CVE-2016-1988CriMar 15, 2016
    risk 0.65cvss 9.8epss 0.11

    HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-1989.

  • CVE-2026-63456CriAug 4, 2026
    risk 0.64cvss 9.8epss 0.00

    Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify…

Page 1 of 19