Vendor CVEs

HPE

All CVEs

1,066 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-26572	HPE Baseboard Management Controller	Hig	0.51	7.8	0.00	Feb 8, 2021	The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.
CVE-2021-26571	HPE Baseboard Management Controller	Hig	0.51	7.8	0.00	Feb 8, 2021	The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.
CVE-2021-26570	HPE Baseboard Management Controller	Hig	0.51	7.8	0.01	Feb 8, 2021	The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webifc_setadconfig function.
CVE-2021-25171	HPE Baseboard Management Controller	Hig	0.51	7.8	0.00	Feb 8, 2021	The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetlicensecfg function.
CVE-2021-25170	HPE Baseboard Management Controller	Hig	0.51	7.8	0.00	Feb 8, 2021	The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetremoteimageinfo function.
CVE-2021-25169	HPE Baseboard Management Controller	Hig	0.51	7.8	0.00	Feb 8, 2021	The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetservicecfg function.
CVE-2021-25168	HPE Baseboard Management Controller	Hig	0.51	7.8	0.00	Feb 8, 2021	The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webupdatecomponent function.
CVE-2021-25142	HPE Baseboard Management Controller	Hig	0.51	7.8	0.00	Feb 8, 2021	The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function.
CVE-2021-25138	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25137	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25136	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25135	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25134	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25133	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25132	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25131	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25130	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25129	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice getvideodata_func…
CVE-2021-25128	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice gethelpdata_func…
CVE-2021-25127	HPE Cloudline CL5800 Gen9 Server	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25126	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25125	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice…
CVE-2021-25124	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice deletevideo_func…
CVE-2021-25123	HPE Cloudline Cl3100 Gen10 Server Firmware	Hig	0.51	7.8	0.00	Jan 29, 2021	The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2020-7135	HPE Service Pack For Proliant	Hig	0.51	7.8	0.01	Apr 27, 2020	A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE servers running Linux. The vulnerable software is included in the HPE Service Pack for ProLiant (SPP) releases 2018.06.0,…
CVE-2019-11987	HPE Smart Update Manager	Hig	0.51	7.8	0.00	Jun 5, 2019	A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of privilege.
CVE-2018-7118	HPE Service Pack For Proliant	Hig	0.51	7.8	0.01	Apr 9, 2019	A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software earlier than version 2018.09.0.
CVE-2018-3613	EDK II EDK II	Hig	0.51	7.8	0.00	Mar 27, 2019	Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
CVE-2016-4386	HPE Network Automation Software	Hig	0.51	7.8	0.00	Sep 29, 2016	HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.
CVE-2016-1990	HPE ArcSight ESM	Hig	0.51	7.8	0.00	Mar 16, 2016	HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors.
CVE-2015-6859	HPE Network Switches	Hig	0.51	7.8	0.01	Jan 5, 2016	HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860.
CVE-2026-73775	HPE AOS-CX	Hig	0.50	7.7	0.00	Sep 1, 2026	Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network…
CVE-2025-37100	HPE Private 5G Core	Hig	0.50	7.7	0.00	Jun 10, 2025	A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system…
CVE-2018-7116	HPE Intelligent Management Center	Hig	0.50	7.5	0.06	Dec 3, 2018	HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.
CVE-2017-5822	HPE Intelligent Management Center (iMC) PLAT	Hig	0.50	7.5	0.07	Feb 15, 2018	A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
CVE-2017-5818	HPE Intelligent Management Center (iMC) PLAT	Hig	0.50	7.5	0.08	Feb 15, 2018	A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
CVE-2017-5811	Microfocus Network Automation	Hig	0.50	7.5	0.09	Feb 15, 2018	A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
CVE-2017-5808	HPE Data Protector	Hig	0.50	7.5	0.10	Feb 15, 2018	A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.
CVE-2016-8529	HPE StoreVirtual 4000 Storage	Hig	0.50	7.6	0.02	Feb 15, 2018	A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version.
CVE-2016-8206	Brocade Network Advisor	Hig	0.50	7.5	0.06	Jan 14, 2017	A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files.
CVE-2016-7426	NTP NTP	Hig	0.50	7.5	0.12	Jan 13, 2017	NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.
CVE-2016-4374	HPE Release Control	Hig	0.50	7.7	0.02	Aug 8, 2016	HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information or cause a denial of service, via unspecified vectors.
CVE-2016-1996	HPE System Management Homepage	Hig	0.50	7.7	0.01	Mar 18, 2016	HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors.
CVE-2026-76688	HPE EdgeConnect SD-WAN Orchestrator	Hig	0.49	7.5	0.00	Sep 15, 2026	Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain…
CVE-2026-76687	HPE Networking EdgeConnect SD-WAN Orchestrator	Hig	0.49	7.5	0.01	Sep 15, 2026	A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with…
CVE-2026-76686	HPE Aruba Networking EdgeConnect SD-WAN Gateways	Hig	0.49	7.5	0.01	Sep 15, 2026	A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an unauthenticated remote attacker to conduct a denial-of-service attack on the affected service.
CVE-2026-73785	HPE IceWall Federation Agent	Hig	0.49	7.5	0.00	Sep 11, 2026	A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS).
CVE-2026-73786	HPE CPPM	Hig	0.49	7.5	0.00	Sep 9, 2026	A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server.
CVE-2026-73774	HPE AOS-CX	Hig	0.49	7.6	0.00	Sep 1, 2026	A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in…
CVE-2026-73771	HPE AOS-CX	Hig	0.49	7.5	0.00	Sep 1, 2026	An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system…

CVE-2021-26572HigFeb 8, 2021
HPE
Baseboard Management Controller
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.
CVE-2021-26571HigFeb 8, 2021
HPE
Baseboard Management Controller
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function.
CVE-2021-26570HigFeb 8, 2021
HPE
Baseboard Management Controller
risk 0.51cvss 7.8epss 0.01
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webifc_setadconfig function.
CVE-2021-25171HigFeb 8, 2021
HPE
Baseboard Management Controller
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetlicensecfg function.
CVE-2021-25170HigFeb 8, 2021
HPE
Baseboard Management Controller
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetremoteimageinfo function.
CVE-2021-25169HigFeb 8, 2021
HPE
Baseboard Management Controller
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetservicecfg function.
CVE-2021-25168HigFeb 8, 2021
HPE
Baseboard Management Controller
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webupdatecomponent function.
CVE-2021-25142HigFeb 8, 2021
HPE
Baseboard Management Controller
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function.
CVE-2021-25138HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25137HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25136HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25135HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25134HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25133HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25132HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25131HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25130HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25129HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice getvideodata_func…
CVE-2021-25128HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice gethelpdata_func…
CVE-2021-25127HigJan 29, 2021
HPE
Cloudline CL5800 Gen9 Server
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25126HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2021-25125HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice…
CVE-2021-25124HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice deletevideo_func…
CVE-2021-25123HigJan 29, 2021
HPE
Cloudline Cl3100 Gen10 Server Firmware
risk 0.51cvss 7.8epss 0.00
The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…
CVE-2020-7135HigApr 27, 2020
HPE
Service Pack For Proliant
risk 0.51cvss 7.8epss 0.01
A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE servers running Linux. The vulnerable software is included in the HPE Service Pack for ProLiant (SPP) releases 2018.06.0,…
CVE-2019-11987HigJun 5, 2019
HPE
Smart Update Manager
risk 0.51cvss 7.8epss 0.00
A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of privilege.
CVE-2018-7118HigApr 9, 2019
HPE
Service Pack For Proliant
risk 0.51cvss 7.8epss 0.01
A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software earlier than version 2018.09.0.
CVE-2018-3613HigMar 27, 2019
EDK II
EDK II
risk 0.51cvss 7.8epss 0.00
Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
CVE-2016-4386HigSep 29, 2016
HPE
Network Automation Software
risk 0.51cvss 7.8epss 0.00
HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.
CVE-2016-1990HigMar 16, 2016
HPE
ArcSight ESM
risk 0.51cvss 7.8epss 0.00
HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors.
CVE-2015-6859HigJan 5, 2016
HPE
Network Switches
risk 0.51cvss 7.8epss 0.01
HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6860.
CVE-2026-73775HigSep 1, 2026
HPE
AOS-CX
risk 0.50cvss 7.7epss 0.00
Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network…
CVE-2025-37100HigJun 10, 2025
HPE
Private 5G Core
risk 0.50cvss 7.7epss 0.00
A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system…
CVE-2018-7116HigDec 3, 2018
HPE
Intelligent Management Center
risk 0.50cvss 7.5epss 0.06
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.
CVE-2017-5822HigFeb 15, 2018
HPE
Intelligent Management Center (iMC) PLAT
risk 0.50cvss 7.5epss 0.07
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
CVE-2017-5818HigFeb 15, 2018
HPE
Intelligent Management Center (iMC) PLAT
risk 0.50cvss 7.5epss 0.08
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
CVE-2017-5811HigFeb 15, 2018
Microfocus
Network Automation
risk 0.50cvss 7.5epss 0.09
A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.
CVE-2017-5808HigFeb 15, 2018
HPE
Data Protector
risk 0.50cvss 7.5epss 0.10
A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.
CVE-2016-8529HigFeb 15, 2018
HPE
StoreVirtual 4000 Storage
risk 0.50cvss 7.6epss 0.02
A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version.
CVE-2016-8206HigJan 14, 2017
Brocade
Network Advisor
risk 0.50cvss 7.5epss 0.06
A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files.
CVE-2016-7426HigJan 13, 2017
NTP
NTP
risk 0.50cvss 7.5epss 0.12
NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.
CVE-2016-4374HigAug 8, 2016
HPE
Release Control
risk 0.50cvss 7.7epss 0.02
HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information or cause a denial of service, via unspecified vectors.
CVE-2016-1996HigMar 18, 2016
HPE
System Management Homepage
risk 0.50cvss 7.7epss 0.01
HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors.
CVE-2026-76688HigSep 15, 2026
HPE
EdgeConnect SD-WAN Orchestrator
risk 0.49cvss 7.5epss 0.00
Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain…
CVE-2026-76687HigSep 15, 2026
HPE
Networking EdgeConnect SD-WAN Orchestrator
risk 0.49cvss 7.5epss 0.01
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with…
CVE-2026-76686HigSep 15, 2026
HPE
Aruba Networking EdgeConnect SD-WAN Gateways
risk 0.49cvss 7.5epss 0.01
A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an unauthenticated remote attacker to conduct a denial-of-service attack on the affected service.
CVE-2026-73785HigSep 11, 2026
HPE
IceWall Federation Agent
risk 0.49cvss 7.5epss 0.00
A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS).
CVE-2026-73786HigSep 9, 2026
HPE
CPPM
risk 0.49cvss 7.5epss 0.00
A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulnerable CPPM server.
CVE-2026-73774HigSep 1, 2026
HPE
AOS-CX
risk 0.49cvss 7.6epss 0.00
A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in…
CVE-2026-73771HigSep 1, 2026
HPE
AOS-CX
risk 0.49cvss 7.5epss 0.00
An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication processing. An unauthenticated remote attacker could exploit this vulnerability under specific conditions to bypass authentication controls or exhaust system…

Page 11 of 22