en
Hewlett Packard Enterprise, or HPE, is a global enterprise technology company. It provides infrastructure, software, and services for AI, hybrid cloud, networking, compute, and storage, helping organizations operate, secure, and use data from edge locations to cloud environments.
As of 09/18/2026, Hewlett Packard Enterprise recorded 2 security vulnerabilities in the last 90 days across 1 products, including 2 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, HPE IceWall products had the most security vulnerabilities in the Hewlett Packard Enterprise ecosystem, with 2 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-73785HPE IceWall Federation Agent and Proxy, Denial of Service vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productHPE IceWall products | Published09/11/2026 | SeverityHigh |
CVE-2026-73784HPE IceWall products, Remote Bypass of Security Restrictions | Exploitation statusNot known exploited | FixNot confirmed | Affected productHPE IceWall products | Published09/11/2026 | SeverityHigh |
CVE-2025-37112Hard-Coded Encryption Keys found in System | Exploitation statusNot known exploited | FixYes | Affected productHPE Telco Network Function Virtual Orchestrator | Published07/31/2025 | SeverityMedium |
CVE-2025-37111Hard-Coded Authentication Keys found in System | Exploitation statusNot known exploited | FixYes | Affected productHPE Telco Network Function Virtual Orchestrator | Published07/31/2025 | SeverityMedium |
CVE-2025-37110Sensitive Credential Information stored insecurely in System Database | Exploitation statusNot known exploited | FixYes | Affected productHPE Telco Network Function Virtual Orchestrator | Published07/31/2025 | SeverityMedium |
CVE-2025-37107 | Exploitation statusNot known exploited | FixYes | Affected productHPE AutoPass License Server | Published07/16/2025 | SeverityHigh |
CVE-2025-37106 | Exploitation statusNot known exploited | FixYes | Affected productHPE AutoPass License Server | Published07/16/2025 | SeverityHigh |
CVE-2025-37105 | Exploitation statusNot known exploited | FixYes | Affected productHPE AutoPass License Server | Published07/16/2025 | SeverityHigh |
CVE-2024-51770 | Exploitation statusNot known exploited | FixYes | Affected productHPE AutoPass License Server | Published07/14/2025 | SeverityHigh |
CVE-2024-51769 | Exploitation statusNot known exploited | FixYes | Affected productHPE AutoPass License Server | Published07/14/2025 | SeverityHigh |
CVE-2024-51768 | Exploitation statusNot known exploited | FixYes | Affected productHPE AutoPass License Server | Published07/14/2025 | SeverityHigh |
CVE-2024-51767 | Exploitation statusNot known exploited | FixYes | Affected productHPE AutoPass License Server | Published07/14/2025 | SeverityHigh |
CVE-2025-37099 | Exploitation statusNot known exploited | FixYes | Affected productInsight Remote Support | Published07/01/2025 | SeverityCritical |
CVE-2025-37098 | Exploitation statusNot known exploited | FixYes | Affected productInsight Remote Support | Published07/01/2025 | SeverityHigh |
CVE-2025-37097 | Exploitation statusPublic exploit | FixYes | Affected productInsight Remote Support | Published07/01/2025 | SeverityHigh |
CVE-2025-37101HPE OneView for VMware vCenter (OV4VC), Local Elevation of Privilege | Exploitation statusNot known exploited | FixYes | Affected productHPE OneView for VMware vCenter | Published06/26/2025 | SeverityHigh |
CVE-2025-27086 | Exploitation statusNot known exploited | FixYes | Affected productHPE Performance Cluster Manager (HPCM) | Published04/21/2025 | SeverityHigh |
CVE-2025-27081HPE NonStop OSM Service Connection Suite, Denial of Service vulnerability | Exploitation statusNot known exploited | FixYes | Affected productHPE NonStop OSM Service Connection Suite | Published04/10/2025 | SeverityMedium |
CVE-2024-13804 | Exploitation statusPublic exploit | FixNot confirmed | Affected productHPE Insight Cluster Management Utility (CMU) | Published03/30/2025 | SeverityCritical |
CVE-2024-11856HPE IceWall Products, Remote Unauthorized Data Modification | Exploitation statusNot known exploited | FixYes | Affected productHPE IceWall | Published12/02/2024 | SeverityLow |
CVE-2024-51766HPE NonStop DISK UTIL, Local Denial of Service vulnerability | Exploitation statusNot known exploited | FixYes | Affected productHPE NonStop DISK UTIL | Published11/22/2024 | SeverityMedium |
CVE-2024-42504HPE IceWall Agent products, Cross-Site Request Forgery (CSRF) | Exploitation statusNot known exploited | FixYes | Affected productHPE IceWall Agent products | Published10/03/2024 | SeverityMedium |
CVE-2024-42400Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol | Exploitation statusNot known exploited | FixYes | Affected productHPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | Published08/06/2024 | SeverityMedium |
CVE-2024-42399Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol | Exploitation statusNot known exploited | FixYes | Affected productHPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | Published08/06/2024 | SeverityMedium |
CVE-2024-42398Unauthenticated Denial-of-Service (DoS) Vulnerabilities in the Soft AP Daemon Service Accessed by the PAPI Protocol | Exploitation statusNot known exploited | FixYes | Affected productHPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | Published08/06/2024 | SeverityMedium |
CVE-2024-22444 | Exploitation statusNot known exploited | FixYes | Affected productHPE Aruba Networking EdgeConnect SD-WAN Orchestrator | Published07/24/2024 | SeverityMedium |
CVE-2024-22443 | Exploitation statusNot known exploited | FixYes | Affected productHPE Aruba Networking EdgeConnect SD-WAN Orchestrator | Published07/24/2024 | SeverityHigh |
CVE-2024-41914 | Exploitation statusNot known exploited | FixYes | Affected productHPE Aruba Networking EdgeConnect SD-WAN Orchestrator | Published07/24/2024 | SeverityHigh |
CVE-2024-22440HPE Compute Scale-up Server 3200 Server, Disclosure of Sensitive Information | Exploitation statusNot known exploited | FixYes | Affected productHPE Compute Scale-up Server 3200 Server | Published04/17/2024 | SeverityMedium |
CVE-2024-22439Certain HPE FlexNetwork and FlexFabric Switches, Remote Authentication Bypass | Exploitation statusNot known exploited | FixNot confirmed | Affected productHPE FlexNetwork and FlexFabric products | Published04/15/2024 | SeverityMedium |
CVE-2024-22438HPE OfficeConnect 1820 Network switches, Cross-Site Request Forgery (CSRF) | Exploitation statusNot known exploited | FixYes | Affected productHPE OfficeConnect 1820 Network switches | Published04/15/2024 | SeverityLow |
CVE-2024-22437HPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of Privilege | Exploitation statusNot known exploited | FixYes | Affected productHPE MSA SAN Storage VSS Provider and CAPI Proxy Software | Published04/15/2024 | SeverityHigh |
CVE-2024-22435HPE NonStop Web ViewPoint Enterprise software, Unauthorized access | Exploitation statusNot known exploited | FixYes | Affected productHPE NonStop Web ViewPoint Enterprise software | Published04/15/2024 | SeverityHigh |
CVE-2023-6573 | Exploitation statusNot known exploited | FixYes | Affected productHPE OneView | Published01/23/2024 | SeverityMedium |
CVE-2023-50275 | Exploitation statusNot known exploited | FixYes | Affected productHPE OneView | Published01/23/2024 | SeverityHigh |
CVE-2023-50274 | Exploitation statusNot known exploited | FixYes | Affected productHPE OneView | Published01/23/2024 | SeverityHigh |
CVE-2023-39268Memory Corruption Vulnerability in ArubaOS-Switch | Exploitation statusNot known exploited | FixNot confirmed | Affected productArubaOS-Switch | Published08/29/2023 | SeverityMedium |
CVE-2023-39267Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface | Exploitation statusNot known exploited | FixNot confirmed | Affected productArubaOS-Switch | Published08/29/2023 | SeverityMedium |
CVE-2023-39266Unauthenticated Stored Cross-Site Scripting in ArubaOS-Switch | Exploitation statusNot known exploited | FixNot confirmed | Affected productArubaOS-Switch | Published08/29/2023 | SeverityHigh |
CVE-2023-28084HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens | Exploitation statusNot known exploited | FixYes | Affected productHPE OneView | Published04/25/2023 | SeverityMedium |
CVE-2022-37911 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityLow |
CVE-2022-37910 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityMedium |
CVE-2022-37909 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityMedium |
CVE-2022-37908 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityMedium |
CVE-2022-37907 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityMedium |
CVE-2022-37906 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityMedium |
CVE-2022-37905 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityMedium |
CVE-2022-37904 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityMedium |
CVE-2022-37903 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityHigh |
CVE-2022-37912 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityHigh |
CVE-2022-37902 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityHigh |
CVE-2022-37901 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityHigh |
CVE-2022-37900 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityHigh |
CVE-2022-37899 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityHigh |
CVE-2022-37898 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityHigh |
CVE-2022-37897 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/03/2022 | SeverityCritical |
CVE-2020-7136 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSmart Update Manager (SUM) | Published04/30/2020 | SeverityUnknown |
CVE-2019-11991 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE 3PAR Service Processors | Published07/09/2019 | SeverityUnknown |
CVE-2018-7063 | Exploitation statusNot confirmed | FixNot confirmed | Affected productAruba ClearPass Policy Manager | Published12/07/2018 | SeverityUnknown |
CVE-2018-7067 | Exploitation statusNot confirmed | FixYes | Affected productAruba ClearPass Policy Manager | Published12/07/2018 | SeverityUnknown |
CVE-2018-7079 | Exploitation statusNot confirmed | FixYes | Affected productAruba ClearPass Policy Manager | Published12/07/2018 | SeverityUnknown |
CVE-2018-7065 | Exploitation statusNot confirmed | FixYes | Affected productAruba ClearPass Policy Manager | Published12/07/2018 | SeverityUnknown |
CVE-2018-7066 | Exploitation statusNot confirmed | FixYes | Affected productAruba ClearPass Policy Manager | Published12/07/2018 | SeverityUnknown |
CVE-2018-7080 | Exploitation statusNot confirmed | FixNot confirmed | Affected productAruba Access Points | Published12/07/2018 | SeverityUnknown |
CVE-2018-7113 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers | Published12/03/2018 | SeverityUnknown |
CVE-2018-7116 | Exploitation statusNot confirmed | FixYes | Affected productHPE Intelligent Management Center (IMC) | Published12/03/2018 | SeverityUnknown |
CVE-2018-7114 | Exploitation statusNot confirmed | FixYes | Affected productHPE Intelligent Management Center (IMC) | Published12/03/2018 | SeverityUnknown |
CVE-2018-7115 | Exploitation statusNot confirmed | FixYes | Affected productHPE Intelligent Management Center (IMC) | Published12/03/2018 | SeverityUnknown |
CVE-2018-7112 | Exploitation statusNot confirmed | FixYes | Affected productWindows firmware installer for Gen9, Gen8, G7,and G6 HPE servers | Published12/03/2018 | SeverityUnknown |
CVE-2018-7111 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE UIoT | Published10/17/2018 | SeverityUnknown |
CVE-2018-7076 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE intelligence Management Center (iMC) PLAT | Published10/17/2018 | SeverityUnknown |
CVE-2018-7110 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE Service Governance Framework (SGF) | Published10/17/2018 | SeverityUnknown |
CVE-2018-7101 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers, HPE Integrated Lights-Out 4 (iLO 4) | Published09/27/2018 | SeverityUnknown |
CVE-2018-7104 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE Intelligent Management Center (iMC) Wireless Services Manager Software | Published09/27/2018 | SeverityUnknown |
CVE-2018-7102 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE Intelligent Management Center (iMC) PLAT | Published09/27/2018 | SeverityUnknown |
CVE-2018-7107 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE Device Entitlement Gateway (DEG) | Published09/27/2018 | SeverityUnknown |
CVE-2018-7105 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers, HPE Integrated Lights-Out 4 (iLO 4), HPE Integrated Lights-Out 3 (iLO 3) | Published09/27/2018 | SeverityUnknown |
CVE-2018-7108 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE StorageWorks XP7 Automation Director (AutoDir) | Published09/27/2018 | SeverityUnknown |
CVE-2018-7109 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE enhanced Internet Usage Manager (eIUM) | Published09/27/2018 | SeverityUnknown |
CVE-2018-7103 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE Intelligent Management Center (iMC) Wireless Services Manager Software | Published09/27/2018 | SeverityUnknown |
CVE-2018-7094 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE 3PAR Service Processors | Published08/14/2018 | SeverityUnknown |
CVE-2018-7077 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE XP P9000 Command View Advanced Edition (CVAE) | Published08/14/2018 | SeverityUnknown |
CVE-2018-7096 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE 3PAR Service Processors | Published08/14/2018 | SeverityUnknown |
CVE-2018-7097 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE 3PAR Service Processors | Published08/14/2018 | SeverityUnknown |
CVE-2018-7100 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHP 1810-24G, HP 1810-48G, HP 1810-8 v2 Switches | Published08/14/2018 | SeverityUnknown |
CVE-2018-7099 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE 3PAR Service Processors | Published08/14/2018 | SeverityUnknown |
CVE-2018-7095 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE 3PAR Service Processors | Published08/14/2018 | SeverityUnknown |
CVE-2018-7093 | Exploitation statusNot confirmed | FixNot confirmed | Affected productiLO 5 for HPE Gen10 Servers, iLO 4, iLO 3, Moonshot Chassis Management Firmware, Moonshot Component Packs for HPE ProLiant m510 and m710x server cartridges | Published08/14/2018 | SeverityUnknown |
CVE-2018-7098 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE 3PAR Service Processors | Published08/14/2018 | SeverityUnknown |
CVE-2016-4403 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHP Keyview | Published08/06/2018 | SeverityUnknown |
CVE-2017-8988 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE Command View Advanced Edition | Published08/06/2018 | SeverityUnknown |
CVE-2018-7058 | Exploitation statusNot confirmed | FixNot confirmed | Affected productAruba ClearPass | Published08/06/2018 | SeverityUnknown |
CVE-2018-7071 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE Network Function Virtualization Director (NFVD) | Published08/06/2018 | SeverityUnknown |
CVE-2016-4404 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHP Keyview | Published08/06/2018 | SeverityUnknown |
CVE-2016-4399 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHP Network Node Manager (NNMi) | Published08/06/2018 | SeverityUnknown |
CVE-2017-8992 | Exploitation statusNot confirmed | FixYes | Affected productHPE CentralView Fraud Risk Management | Published08/06/2018 | SeverityUnknown |
CVE-2018-7072 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHPE Moonshot Provisioning Manager | Published08/06/2018 | SeverityUnknown |
CVE-2016-8527 | Exploitation statusPublic exploit | FixNot confirmed | Affected productAruba AirWave | Published08/06/2018 | SeverityUnknown |
CVE-2016-4400 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHP Network Node Manager (NNMi) | Published08/06/2018 | SeverityUnknown |
CVE-2016-4391 | Exploitation statusNot confirmed | FixNot confirmed | Affected productHP ArcSight WINC Connector | Published08/06/2018 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
.svg){kind=icon}
.svg){kind=icon}
.svg){kind=icon}
%20for%20HPE%20Gen10%20Servers.svg){kind=icon}
.svg){kind=icon}
%20PLAT.svg){kind=icon}
.svg){kind=icon}
%20for%20HPE%20Gen10%20Servers%2C%20HPE%20Integrated%20Lights-Out%204%20(iLO%204).svg){kind=icon}
%20Wireless%20Services%20Manager%20Software.svg){kind=icon}
%20PLAT.svg){kind=icon}
.svg){kind=icon}
%20for%20HPE%20Gen10%20Servers%2C%20HPE%20Integrated%20Lights-Out%204%20(iLO%204)%2C%20HPE%20Integrated%20Lights-Out%203%20(iLO%203).svg){kind=icon}
.svg){kind=icon}
.svg){kind=icon}
.svg){kind=icon}
.svg){kind=icon}
.svg){kind=icon}
