HPESBGN04904 rev.3 - HPE Private Cloud AI, Multiple Vulnerabilities

🗓️ 01 Aug 2025 00:00:00Reported by hpeType

Hewlett Packard Enterprise Private Cloud AI before version 1.5 has multiple vulnerabilities; update to AI Essentials 1.8.0 or later.

Reporter	Title	Published	Views	Family All 183
IBM Security Bulletins	Security Bulletin: There is a vulnerablity in the torch library affecting IBM watsonx Code Assistant On Prem	19 Jun 202514:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Remote Command Execution in PyTorch [CVE-2025-32434]	28 Aug 202515:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses torch - 2.2.0+cpu which is vulnerable to CVE-2025-32434.	5 Dec 202505:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is affected by cross-site scripting and vulnerable to CVE-2025-32434.	30 Mar 202611:47	–	ibm
GithubExploit	Exploit for Deserialization of Untrusted Data in Bentoml	3 May 202519:04	–	githubexploit
GithubExploit	Exploit for CVE-2025-23266	4 Sep 202513:42	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Linuxfoundation Pytorch	30 Jun 202620:00	–	githubexploit
GithubExploit	Exploit for CVE-2025-23266	2 Sep 202512:20	–	githubexploit
GithubExploit	Exploit for CVE-2025-23266	7 Sep 202503:03	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Bentoml	9 Jul 202615:51	–	githubexploit

Vulners

Node

22 Aug 2025 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.19.8

CVSS 49.3

EPSS0.50446

SSVC