HPE vulnerabilities

CVEs per yearBy the year they were published

1. 20164
2. 20192
3. 20204
4. 20221
5. 20232

Newest CVEs

• CVE-2023-50271

  HP-UX System Management Homepage, Disclosure of Information

  HPE · HPE System Management Homepage (SMH)

  High7.2
• CVE-2023-28083

  Potential Cross-Site scripting vulnerability in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4).

  HPE · Integrated Lights-Out

  High8.3
• CVE-2022-37931

  A vulnerability in NetBatch-Plus software allows unauthorized access to the application

  HPE · NetBatch-Plus software

  High7.3
• CVE-2019-12000

  HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when HTTPS is used between the USSD and an…

  HPE · HPE MSE Msg Gw application E-LTU

  Medium6.6
• CVE-2020-7135

  A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE…

  HPE · HPE Service Pack for ProLiant

  High7.8
• CVE-2019-11998

  HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerability could…

  HPE · HPE Superdome Flex Server

  Medium5.5
• CVE-2019-11997

  A potential security vulnerability has been identified in HPE enhanced Internet Usage Manager (eIUM) versions 8.3 and 9.0. The vulnerability could be used for…

  HPE · HPE enhanced Internet Usage Manager (eIUM)

  Medium6.1
• CVE-2018-7120

  A security vulnerability in the HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy running firmware 5.00.50, which is part of the HPE Synergy…

  HPE · HPE Virtual Connect SE 16Gb Fibre Channel Module for HPE Synergy

  Critical9.8
• CVE-2018-7119

  A Local Disclosure of Sensitive Information vulnerability was identified in HPE NonStop Safeguard earlier than version SPR T9750L01^AIC or T9750H05^AIH, and…

  HPE · NonStop SAFEGAURD and NonStop H-series STDSEC-STANDARD SECURITY Product

  High7.0
• CVE-2016-4396

  HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.

  HPE · HPE System Management Homepage before v7.6

  High7.5