HPE vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2023-50271 A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH).High 7.2 · Dec 17, 2023
• CVE-2023-28083 A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (High 8.3 · Mar 22, 2023
• CVE-2022-37931 A vulnerability in NetBatch-Plus software allows unauthorized access to the application.High 7.3 · Nov 22, 2022
• CVE-2022-28640 A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability was discHigh 8.8 · Sep 20, 2022
• CVE-2022-28639 A remote potential adjacent denial of service (DoS) and potential adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confiHigh 8.8 · Sep 20, 2022
• CVE-2022-28638 An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that could potentially lead to a loss of confideHigh 7.8 · Sep 20, 2022
• CVE-2022-28637 A local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availaHigh 7.8 · Sep 20, 2022
• CVE-2022-28636 A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated LightsHigh 7.4 · Aug 12, 2022
• CVE-2022-28635 A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated LightsHigh 7.4 · Aug 12, 2022
• CVE-2022-28633 A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmHigh 7.3 · Aug 12, 2022
• CVE-2022-28632 A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO High 8.8 · Aug 12, 2022
• CVE-2022-28631 A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 (iLO High 8.8 · Aug 12, 2022
• CVE-2022-28630 A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71.High 7.3 · Aug 12, 2022
• CVE-2022-28629 A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71.High 7.8 · Aug 12, 2022
• CVE-2022-28628 A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71.High 8.4 · Aug 12, 2022
• CVE-2022-28627 A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71.High 8.4 · Aug 12, 2022
• CVE-2022-28623 Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection.Critical 9.8 · Jul 8, 2022
• CVE-2022-28621 A remote disclosure of sensitive information vulnerability was discovered in HPE NonStop DSM/SCM version: T6031H03^ADP.High 7.5 · Jun 28, 2022
• CVE-2022-28622 A potential security vulnerability has been identified in HPE StoreOnce Software.High 7.5 · Jun 27, 2022
• CVE-2022-28620 A remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System Solutions; HPE Slingshot; and HPE Cray EX supercomputers versions: Critical 9.8 · Jun 24, 2022
• CVE-2022-28619 A potential security vulnerability has been identified in the installer of HPE Version Control Repository Manager.High 7.8 · Jun 24, 2022
• CVE-2022-28618 A command injection security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble StoCritical 9.8 · May 20, 2022
• CVE-2022-23705 A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage Secondary FlHigh 7.5 · May 9, 2022
• CVE-2022-23703 A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble Storage Secondary FlaHigh 7.5 · Apr 12, 2022
• CVE-2021-41004 A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.High 7.5 · Apr 12, 2022