VYPR
← HPE

Vendor CVEs

HPE

All CVEs

938 total · sorted by risk
  • CVE-2021-26577HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function.

  • CVE-2021-26575HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletesolvideofile function.

  • CVE-2021-26574HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletevideofile function.

  • CVE-2021-26573HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg function.

  • CVE-2021-25172HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.01

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so websetdefaultlangcfg function.

  • CVE-2021-26572HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.

  • CVE-2021-26571HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.

  • CVE-2021-26570HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.01

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webifc_setadconfig function.

  • CVE-2021-25171HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetlicensecfg function.

  • CVE-2021-25170HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetremoteimageinfo function.

  • CVE-2021-25169HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetservicecfg function.

  • CVE-2021-25168HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webupdatecomponent function.

  • CVE-2021-25142HigFeb 8, 2021
    HPE
    Baseboard Management Controller
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function.

  • CVE-2021-25138HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25137HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25136HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25135HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25134HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25133HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25132HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25131HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25130HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25129HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice getvideodata_func…

  • CVE-2021-25128HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice gethelpdata_func…

  • CVE-2021-25127HigJan 29, 2021
    HPE
    Cloudline CL5800 Gen9 Server
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25126HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25125HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice…

  • CVE-2021-25124HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice deletevideo_func…

  • CVE-2021-25123HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2020-7135HigApr 27, 2020
    HPE
    Service Pack For Proliant
    risk 0.51cvss 7.8epss 0.01

    A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE servers running Linux. The vulnerable software is included in the HPE Service Pack for ProLiant (SPP) releases 2018.06.0,…

  • CVE-2019-11987HigJun 5, 2019
    HPE
    Smart Update Manager
    risk 0.51cvss 7.8epss 0.00

    A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of privilege.

  • CVE-2018-7118HigApr 9, 2019
    HPE
    Service Pack For Proliant
    risk 0.51cvss 7.8epss 0.01

    A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software earlier than version 2018.09.0.

  • CVE-2018-3613HigMar 27, 2019
    EDK II
    EDK II
    risk 0.51cvss 7.8epss 0.00

    Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

  • CVE-2016-4386HigSep 29, 2016
    HPE
    Network Automation Software
    risk 0.51cvss 7.8epss 0.01

    HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.

  • CVE-2016-1990HigMar 16, 2016
    HPE
    ArcSight ESM
    risk 0.51cvss 7.8epss 0.00

    HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors.

  • CVE-2015-6859HigJan 5, 2016
    HPE
    Network Switches
    risk 0.51cvss 7.8epss 0.00

    HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860.

  • CVE-2025-37100HigJun 10, 2025
    HPE
    Private 5G Core
    risk 0.50cvss 7.7epss 0.00

    A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system…

  • CVE-2018-7116HigDec 3, 2018
    HPE
    Intelligent Management Center
    risk 0.50cvss 7.5epss 0.10

    HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.

  • CVE-2017-5822HigFeb 15, 2018
    HPE
    Intelligent Management Center (iMC) PLAT
    risk 0.50cvss 7.5epss 0.12

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

  • CVE-2017-5818HigFeb 15, 2018
    HPE
    Intelligent Management Center (iMC) PLAT
    risk 0.50cvss 7.5epss 0.12

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

  • CVE-2017-5811HigFeb 15, 2018
    Microfocus
    Network Automation
    risk 0.50cvss 7.5epss 0.17

    A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.

  • CVE-2017-5808HigFeb 15, 2018
    HPE
    Data Protector
    risk 0.50cvss 7.5epss 0.16

    A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

  • CVE-2016-8529HigFeb 15, 2018
    HPE
    StoreVirtual 4000 Storage
    risk 0.50cvss 7.6epss 0.04

    A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version.

  • CVE-2016-8206HigJan 14, 2017
    Brocade
    Network Advisor
    risk 0.50cvss 7.5epss 0.15

    A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files.

  • CVE-2016-7426HigJan 13, 2017
    NTP
    NTP
    risk 0.50cvss 7.5epss 0.12

    NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.

  • CVE-2016-4374HigAug 8, 2016
    HPE
    Release Control
    risk 0.50cvss 7.7epss 0.02

    HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information or cause a denial of service, via unspecified vectors.

  • CVE-2016-1996HigMar 18, 2016
    HPE
    System Management Homepage
    risk 0.50cvss 7.7epss 0.01

    HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors.

  • CVE-2026-23827HigMay 12, 2026
    HPE
    AOS
    risk 0.49cvss 7.5epss 0.01

    A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code…

  • CVE-2026-23826HigMay 12, 2026
    HPE
    AOS-8 Operating System
    risk 0.49cvss 7.5epss 0.00

    A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker to exploit this vulnerability by sending specially crafted network packets to the affected device, potentially resulting in a denial-of-service condition.…

  • CVE-2026-23825HigMay 12, 2026
    HPE
    AOS-8
    risk 0.49cvss 7.5epss 0.00

    Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful…

Page 10 of 19