Hewlett Packard Enterprise vulnerabilities, page 3
347 vulnerabilities
Known vulnerabilities in Hewlett Packard Enterprise products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 145 products.
CVE-2026-73794hewlett packard enterprisehpe nonstop modular nsj
EPSS score0.18%
HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)CVE-2026-73795hewlett packard enterprisehpe nonstop tmf auditread2EPSS score0.10%
A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.CVE-2026-73796hewlett packard enterprisehpe nonstop tsqlexeEPSS score0.13%
A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.CVE-2026-73798hewlett packard enterprisehpe nonstop dns 9.2.3 non secure versionEPSS score0.33%
A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.CVE-2026-73797hewlett packard enterprisehpe nonstop tsqlfilEPSS score0.11%
A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.CVE-2026-76655hewlett packard enterprisehpe nonstop snmp trap multiplexerEPSS score0.57%
A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code executionCVE-2018-7107hewlett packard enterprisehpe device entitlement gateway (deg)+1EPSS score0.88%
A potential security vulnerability has been identified in HPE Device Entitlement Gateway (DEG) v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege.CVE-2018-7079arubanetworksclearpass_policy_manager+1EPSS score0.94%
Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrative user to execute those operations regardless of privilege level. This could allow low-privilege users to view, modify, or delete guest users. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.CVE-2018-7095hewlett packard enterprisehpe 3par service processors+1EPSS score2.22%
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow access restriction bypass.CVE-2018-7073canonicalubuntu_linux+2EPSS score0.73%
A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24.CVE-2018-7077hewlett packard enterprisehpe xp p9000 command view advanced edition (cvae)+2EPSS score2.45%
A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), Configuration Manager (CM 8.5.0-00 and prior to 8.6.0-00) could be exploited to allow local and remote unauthorized access to sensitive information.CVE-2018-7116hewlett packard enterprisehpe intelligent management center (imc)+1EPSS score10.30%
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.CVE-2018-7094hewlett packard enterprisehpe 3par service processors+1EPSS score0.36%
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA). The vulnerability may be exploited locally to allow disclosure of privileged information.CVE-2018-7069hewlett packard enterprisehpe centralview fraud risk management+1EPSS score1.80%
HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version.CVE-2018-7109hewlett packard enterprisehpe enhanced internet usage manager (eium)+1EPSS score1.00%
HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager (eIUM) v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM.CVE-2018-7108hewlett packard enterprisehpe storageworks xp7 automation director (autodir)+1EPSS score2.47%
HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vulnerability that exposed the user authentication information of the storage system. This problem sometimes occurred under specific conditions when running a service template.CVE-2018-7075hewlett packard enterprisehpe intelligent management center (imc)+1EPSS score0.97%
A remote cross-site scripting (XSS) vulnerability was identified in HPE Intelligent Management Center (iMC) PLAT version v7.3 (E0506). The vulnerability is fixed in Intelligent Management Center PLAT 7.3 E0605P04 or subsequent version.CVE-2018-7065arubanetworksclearpass_policy_manager+1EPSS score0.91%
An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this vulnerability to gain access to "appadmin" credentials, leading to complete cluster compromise. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.CVE-2018-7101hewlett packard enterprisehpe integrated lights-out 5 (ilo 5) for hpe gen10 servers, hpe integrated lights-out 4 (ilo 4)+2EPSS score7.15%
A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30.CVE-2018-7096hewlett packard enterprisehpe 3par service processors+1EPSS score3.26%
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow code execution.