Hpe vulnerabilities
Published CVEs affecting Hpe products: 148 record(s), with severity, exploitation and fixes.
Arubaos-cx 48Edgeconnect Operating System 38Aruba Networking Private 5g Core 5Oneview 4HPE NonStop EXPAND 4Proliant Xl170r Gen9 Server Firmware 2Synergy 480 Gen9 Compute Module Firmware 2Proliant Xl190r Gen9 Server Firmware 2Proliant Xl230a Gen9 Server Firmware 2Proliant Xl250a Gen9 Server Firmware 2Proliant Xl450 Gen9 Server Firmware 2Proliant Xl730f Gen9 Server Firmware 2Proliant Dl60 Gen9 Server Firmware 2Proliant Dl80 Gen9 Server Firmware 2Proliant Dl120 Gen9 Server Firmware 2Proliant Dl160 Gen9 Server Firmware 2Proliant Dl180 Gen9 Server Firmware 2Synergy 680 Gen9 Compute Module Firmware 2Synergy 620 Gen9 Compute Module Firmware 2Proliant Ml350 Gen9 Server Firmware 2Proliant Ml150 Gen9 Server Firmware 2Proliant Ml110 Gen9 Server Firmware 2Apollo 4200 Gen9 Server Firmware 2Proliant Ws460c Gen9 Graphics Server Blade Firmware 2HPE NonStop SNMP Trap Multiplexer 2HPE NonStop TCP/IP UTILITIES 2HPE NonStop TELSERV 2HPE IceWall products 2Proliant Dl380 Gen9 Server Firmware 2Apollo 4200 Gen10 Server Firmware 2Proliant Bl460c Gen10 Server Blade Firmware 2Proliant Dl580 Gen10 Server Firmware 2Proliant Dl560 Gen10 Server Firmware 2Proliant Dl380 Gen10 Server Firmware 2Proliant Dl360 Gen10 Server Firmware 2Proliant Dl180 Gen10 Server Firmware 2Proliant Dl360 Gen9 Server Firmware 2Proliant Dl160 Gen10 Server Firmware 2Proliant Dl120 Gen10 Server Firmware 2Proliant Ml350 Gen10 Server Firmware 2
CVE-2026-76665
High · 7.1
CWE-125 Oct 15, 2026
HPE NonStop EXPAND - Buffer Overflow vulnerability
A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.
CVE-2026-76664
Medium · 6.4
CWE-125 Oct 15, 2026
HPE NonStop EXPAND - Out-of-Bounds memory read/write
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations
CVE-2026-76663
High · 7.5
CWE-121 Oct 15, 2026
HPE NonStop TELSERV - Memory corruption vulnerability
A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.
CVE-2026-76662
Medium · 5.9
CWE-121 Oct 15, 2026
HPE NonStop TELSERV - Memory corruption vulnerability
A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.
CVE-2026-76661
High · 7.6
CWE-20 Oct 14, 2026
HPE NonStop QIOMON - Memory corruption vulnerability
A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.
CVE-2026-76660
High · 8.7
CWE-20 Oct 14, 2026
HPE NonStop CIPSAM - Memory corruption vulnerability
A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds
write that can corrupt buffer data.
CVE-2026-76659
High · 7.5
CWE-306 Oct 14, 2026
HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability
A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.
CVE-2026-76656
Medium · 5.3
CWE-306 Oct 14, 2026
HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability
A
vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote
attacker to cause a denial of service when traceroute is executed under
certain conditions.
CVE-2026-73799
High · 7.5
CWE-121 Oct 14, 2026
HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability
A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption
CVE-2026-76655
High · 7.5
CWE-121 Oct 14, 2026
HPE NonStop SNMP Trap Multiplexer - Buffer Overflow vulnerability
A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution
CVE-2026-73798
High · 8.2
CWE-115 Oct 14, 2026
HPE NonStop DNS 9.2.3 Non Secure Version
A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.
CVE-2026-73797
Medium · 5.3
CWE-475 Oct 14, 2026
HPE NonStop TSQLFIL - Memory corruption vulnerability
A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.
CVE-2026-73796
Medium · 4.4
CWE-564 Oct 14, 2026
HPE NonStop TSQLEXE - Memory Corruption vulnerability
A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.
CVE-2026-73795
Medium · 6.4
CWE-121 Oct 14, 2026
HPE NonStop TMF Auditread2 - Denial of Service vulnerability
A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.
CVE-2026-73794
Medium · 4.6
CWE-337 Oct 14, 2026
HPE NonStop MODULAR NSJ - Vulnerability in Random Number Generation
HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)
CVE-2026-73793
High · 7.9
CWE-502 Oct 14, 2026
HPE NonStop Middleware - Secret key handling vulnerability
HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.
CVE-2026-73792
Low · 3.8
CWE-78 Oct 14, 2026
HPE NonStop Java JToolkit - Command Injection and buffer overflow vulnerability
A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.
CVE-2026-73791
Low · 2.0
CWE-122 Oct 14, 2026
HPE NonStop Hpjmeter - Buffer overflow vulnerability
A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow.
CVE-2026-73790
High · 8.2
CWE-20 Oct 14, 2026
HPE NonStop iTP WebServer - Memory corruption vulnerability
A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.
CVE-2026-79842
Critical · 9.1
CWE-862 Oct 8, 2026
Missing Authorization in Hpe HPE Intelligent Management Center (iMC)
An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713
CVE-2026-76720
Medium · 4.3
CWE-601 Sep 29, 2026
HPE OneView - URL Redirect vulnerability
A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect.
CVE-2026-76719
High · 8.2
CWE-79 Sep 29, 2026
HPE OneView - Cross-site scripting vulnerability
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions.
CVE-2026-76718
High · 8.2
CWE-79 Sep 29, 2026
HPE OneView - Cross-site scripting vulnerability
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions.
CVE-2026-76707
Medium · 4.3
CWE-200 Sep 15, 2026
Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.
CVE-2026-76706
Medium · 5.3
CWE-200 Sep 15, 2026
Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks.