Hewlett Packard Enterprise AutoPass License Server Hard-coded Credentials Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the hsqldb service, which listens on TCP po...

CVE-2025-37106

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37107

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37106

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37107

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37105

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37107

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37107

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37106

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37106

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37106

CVE-2025-37106 affects Hewlett Packard Enterprise AutoPass License Server (APLS) prior to 9.18. Reports describe an authentication bypass and information disclosure via the web service (default port 5814) due to hard-coded credentials, allowing remote disclosure or configuration edits. Remediatio...

CVE-2025-37105

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37105

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37105

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37105

HPE AutoPass License Server (APLS) prior to 9.18 is affected by an hsqldb-related remote code execution vulnerability. The ZDI advisory details that the flaw exists in the hsqldb service (listening on TCP port 9001 by default) and is exploitable by network-adjacent attackers without authenticatio...

CVE-2024-51770

An information disclosure vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51769

An information disclosure vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51767

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

CVE-2024-51768

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.17...

HPE AutoPass License Server 安全漏洞

HPE AutoPass License Server is a license management system from HPE America. A security vulnerability exists in HPE AutoPass License Server versions prior to 9.18 that stems from authentication bypass and information disclosure...