Hpe vulnerabilities, page 4
279 vulnerabilities
Known vulnerabilities in Hpe products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 198 products.
CVE-2021-3191hpeweb_viewpoint
EPSS score3.60%
Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ (L) and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and T0986H01^AAC through T0986H01^AAI (J and H).CVE-2021-33895etinetbackbox_e4.09_firmware+1EPSS score0.90%
ETINET BACKBOX E4.09 and H4.09 mismanages password access control. When a user uses the User ID of the process running BBSV to login to the Backbox UI application, the system procedure (USER_AUTHENTICATE_) used for verifying the Password returns 0 (no error). The reason is that the user is not running the XYGate application. Hence, BBSV assumes the Password is correct. For H4.09, the affected version isT0954V04^AAO. For E4.09, the affected version is 22SEP2020. Note: If your current version is E4.10-16MAY2021 (version procedure T9999V04_16MAY2022_BPAKETI_10), a hotfix (FIXPAK-19OCT-2022) is available in version E4.10-19OCT2022. Resolution to CVE-2021-33895 in version E4.11-19OCT2022CVE-2015-5477appleos_x_server+59KEVEPSS score99.41%
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.CVE-2016-9042debianntp+5EPSS score3.91%
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.CVE-2016-4370hpeproject_and_portfolio_management_centerEPSS score2.33%
HPE Project and Portfolio Management Center (PPM) 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to execute arbitrary commands or obtain sensitive information via unspecified vectors.CVE-2016-4394hpsystem_management_homepage+1EPSS score2.65%
HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue.CVE-2016-4396hpsystem_management_homepage+1EPSS score4.11%
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.CVE-2016-4395hpsystem_management_homepage+1EPSS score3.87%
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.CVE-2016-4393hpsystem_management_homepage+1EPSS score1.16%
HPE System Management Homepage before v7.6 allows "remote authenticated" attackers to obtain sensitive information via unspecified vectors, related to an "XSS" issue.CVE-2016-7434debianntp+3EPSS score53.09%
The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.CVE-2016-7426canonicalubuntu_linux+10EPSS score12.37%
NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.CVE-2025-25040hewlett packard enterprise (hpe)aos-cx+1EPSS score0.14%
A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects:
- AOS-CX 10.14.xxxx : All patches
- AOS-CX 10.15.xxxx : 10.15.1000 and below
The vulnerability is specific to traffic originated by the CX 9300 switch platform and could allow an attacker to bypass ACL rules applied to routed ports on egress. As a result, port ACLs are not correctly enforced, which could lead to unauthorized traffic flow and violations of security policies. Egress VLAN ACLs and Routed VLAN ACLs are not affected by this vulnerability.CVE-2025-37093hewlett packard enterprise (hpe)hpe storeonce software+1EPSS score1.10%
An authentication bypass vulnerability exists in HPE StoreOnce Software.CVE-2025-37095hewlett packard enterprise (hpe)hpe storeonce software+1EPSS score1.18%
A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software.CVE-2025-37099hewlett packard enterpriseinsight remote support+1EPSS score0.76%
A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.CVE-2025-37090hewlett packard enterprise (hpe)hpe storeonce software+1EPSS score0.62%
A server-side request forgery vulnerability exists in HPE StoreOnce Software.CVE-2025-37091hewlett packard enterprise (hpe)hpe storeonce software+1EPSS score1.19%
A command injection remote code execution vulnerability exists in HPE StoreOnce Software.CVE-2025-37105hewlett packard enterprisehpe autopass license server+1EPSS score0.74%
An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.CVE-2025-37156hewlett packard enterprise (hpe)hpe aruba networking aos-cx+1EPSS score0.32%
A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional.CVE-2025-37089hewlett packard enterprise (hpe)hpe storeonce software+1EPSS score1.25%
A command injection remote code execution vulnerability exists in HPE StoreOnce Software.