Patchfirst
Patchfirst

Vendor

Hewlett Packard Enterprise

1 of 61 Hewlett Packard Enterprise CVEs in Patchfirst (2%) are in of vulnerabilities exploited in the wild.

CVEs
61
In CISA KEV
12%
Known ransomware use
0
Median days to KEV
22
from publication
Latest KEV listing
7 Jan 2026
Watch Hewlett Packard Enterprise Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • OneView In KEV: 1 CVEs: 1
  • ArubaOS (AOS) In KEV: 0 CVEs: 32
  • ClearPass Policy Manager (CPPM) In KEV: 0 CVEs: 10
  • AOS-Switch (AOS-S) In KEV: 0 CVEs: 6
  • HPE Insight Remote Support In KEV: 0 CVEs: 2
  • Intelligent Management Center (iMC) PLAT In KEV: 0 CVEs: 2
  • Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches In KEV: 0 CVEs: 1
  • HPE Aruba Networking 501 Wireless Client Bridge In KEV: 0 CVEs: 1
  • HPE Intelligent Management Center (iMC) In KEV: 0 CVEs: 1
  • iMC PLAT In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with Hewlett Packard Enterprise CVEs
Open in ATT&CK Navigator

Counts are Hewlett Packard Enterprise CVEs linked to the technique. Each link’s provenance is on the CVE page.

Hewlett Packard Enterprise CVEs

61 CVEs, by priority
  1. CVE-2025-37164Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
    Hewlett Packard Enterprise (HPE) · OneViewKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    90.2%Top 0.2%
    74.8priority
  2. CVE-2017-12542A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to…
    Hewlett Packard Enterprise · Integrated Lights-out 4 (iLO 4)Public exploit
    99.3%Top 0.06%
    70.0priority
  3. CVE-2022-37932A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and…
    Hewlett Packard Enterprise (HPE) · Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switchesPublic exploitHigh · 8.8
    2.8%Top 13%
    63.5priority
  4. CVE-2024-54006Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge
    Hewlett Packard Enterprise (HPE) · HPE Aruba Networking 501 Wireless Client BridgeHigh · 7.2
    1.5%Top 25%
    60.0priority
  5. CVE-2020-7136A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access
    Hewlett Packard Enterprise · Smart Update Manager (SUM)Public exploit
    80.9%Top 0.37%
    59.9priority
  6. CVE-2016-8530A remote denial of service vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found
    Hewlett Packard Enterprise · iMC PLAT
    48.0%Top 1.1%
    54.8priority
  7. CVE-2017-8961A directory traversal vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.3 E0504P02 could allow remote…
    Hewlett Packard Enterprise · Intelligent Management Center
    19.1%Top 2.7%
    54.5priority
  8. CVE-2024-53676A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution
    Hewlett Packard Enterprise (HPE) · HPE Insight Remote SupportPublic exploitCritical · 9.8
    56.3%Top 0.95%
    31.7priority
  9. CVE-2024-53675An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose…
    Hewlett Packard Enterprise (HPE) · HPE Insight Remote SupportHigh · 7.3
    81.0%Top 0.37%
    25.0priority
  10. CVE-2017-5817A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found
    Hewlett Packard Enterprise · Intelligent Management Center (iMC) PLATPublic exploit
    82.6%Top 0.33%
    24.9priority
  11. CVE-2017-5816A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found
    Hewlett Packard Enterprise · Intelligent Management Center (iMC) PLATPublic exploit
    86.2%Top 0.27%
    24.9priority
  12. CVE-2017-12557A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and…
    Hewlett Packard Enterprise · intelligent Management Center (iMC) PLATPublic exploit
    79.8%Top 0.39%
    24.9priority
  13. CVE-2026-79861There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.8
    1.6%Top 25%
    23.8priority
  14. CVE-2026-79857There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.8
    1.4%Top 27%
    23.3priority
  15. CVE-2026-79846Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 10.0
    1.4%Top 28%
    23.3priority
  16. CVE-2026-79864Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.6
    1.2%Top 33%
    22.1priority
  17. CVE-2026-79847Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 10.0
    0.8%Top 43%
    20.3priority
  18. CVE-2026-79851Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 10.0
    0.8%Top 45%
    20.0priority
  19. CVE-2026-79855An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.8
    0.8%Top 45%
    19.8priority
  20. CVE-2026-79860Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.8
    0.7%Top 45%
    19.7priority
  21. CVE-2026-79849Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 10.0
    0.7%Top 47%
    19.6priority
  22. CVE-2026-79848Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 10.0
    0.7%Top 47%
    19.6priority
  23. CVE-2026-79850Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 10.0
    0.7%Top 47%
    19.5priority
  24. CVE-2026-79844Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 10.0
    0.7%Top 47%
    19.5priority
  25. CVE-2026-79859Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.8
    0.7%Top 47%
    19.4priority
  26. CVE-2026-79853Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.8
    0.7%Top 47%
    19.4priority
  27. CVE-2026-79854A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.8
    0.6%Top 49%
    18.9priority
  28. CVE-2026-79852A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.8
    0.6%Top 49%
    18.9priority
  29. CVE-2026-79856A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.8
    0.6%Top 51%
    18.6priority
  30. CVE-2026-76742Authentication bypass vulnerabilities exist in the web management interface of AOS-S
    Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S)Critical · 9.8
    0.6%Top 52%
    18.6priority
  31. CVE-2026-76743A vulnerability have been identified in the management interface of AOS-S that could potentially allow an…
    Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S)Critical · 9.8
    0.5%Top 54%
    18.2priority
  32. CVE-2026-76750Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager
    Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM)Critical · 9.8
    0.5%Top 55%
    18.1priority
  33. CVE-2026-76753A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow…
    Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM)Critical · 9.8
    0.5%Top 55%
    17.9priority
  34. CVE-2026-79872A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.4
    0.6%Top 54%
    17.8priority
  35. CVE-2026-76744Buffer overflow vulnerabilities exist in the affected interface of AOS-S
    Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S)Critical · 9.8
    0.5%Top 56%
    17.7priority
  36. CVE-2026-79858An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.8
    0.5%Top 57%
    17.5priority
  37. CVE-2026-76752Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass…
    Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM)Critical · 9.8
    0.5%Top 59%
    17.2priority
  38. CVE-2026-79796Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially…
    Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM)Critical · 9.8
    0.5%Top 60%
    17.1priority
  39. CVE-2026-79805An authenticated path traversal vulnerability exists in ClearPass Policy Manager
    Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM)Critical · 9.8
    0.4%Top 63%
    16.5priority
  40. CVE-2026-76747Buffer overflow vulnerabilities exist in the affected interface of AOS-S
    Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S)Critical · 9.1
    0.4%Top 61%
    16.3priority
  41. CVE-2026-76754A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to…
    Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM)Critical · 9.8
    0.4%Top 67%
    15.5priority
  42. CVE-2026-79798SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a…
    Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM)Critical · 9.9
    0.3%Top 72%
    14.7priority
  43. CVE-2026-79865A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.6
    0.4%Top 71%
    14.4priority
  44. CVE-2026-79842An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713
    Hewlett Packard Enterprise · HPE Intelligent Management Center (iMC)Critical · 9.1
    0.3%Top 74%
    14.1priority
  45. CVE-2026-79801A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager…
    Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM)Critical · 9.8
    0.3%Top 75%
    14.1priority
  46. CVE-2026-76751A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager
    Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM)Critical · 9.8
    0.3%Top 77%
    13.6priority
  47. CVE-2026-79871A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.6
    0.3%Top 76%
    13.5priority
  48. CVE-2026-79869Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.6
    0.3%Top 78%
    13.0priority
  49. CVE-2026-79867Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.6
    0.3%Top 78%
    13.0priority
  50. CVE-2026-79794A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an…
    Hewlett Packard Enterprise (HPE) · ClearPass Policy Manager (CPPM)Critical · 9.1
    0.3%Top 78%
    13.0priority
  51. CVE-2026-79870An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.6
    0.3%Top 81%
    12.5priority
  52. CVE-2026-79868Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.6
    0.3%Top 81%
    12.5priority
  53. CVE-2026-79863Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.6
    0.3%Top 82%
    12.2priority
  54. CVE-2026-79862Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.6
    0.3%Top 82%
    12.2priority
  55. CVE-2026-76745Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker
    Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S)Critical · 9.6
    0.2%Top 85%
    11.8priority
  56. CVE-2026-79866An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.6
    0.2%Top 85%
    11.7priority
  57. CVE-2026-79874An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.3
    0.2%Top 84%
    11.6priority
  58. CVE-2026-79873Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.3
    0.2%Top 84%
    11.6priority
  59. CVE-2026-79876A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.3
    0.2%Top 86%
    11.2priority
  60. CVE-2026-79875A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated…
    Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)Critical · 9.3
    0.2%Top 86%
    11.2priority
  61. CVE-2026-76746An unauthenticated buffer overflow vulnerability exists in AOS-S
    Hewlett Packard Enterprise (HPE) · AOS-Switch (AOS-S)Critical · 9.3
    0.2%Top 90%
    10.6priority
↑ ↓ chooseEnter openEsc close