HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass

HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22 contains an authentication bypass vulnerability which could be remotely exploited to bypass remote authentication and possibly lead to execution of arbitrary commands, gaining...

HPE System Management - Cross-Site Scripting

HPE System Management contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

CVE-2026-23813

CVE-2026-23813 — AOS-CX Pre-Auth Authentication Bypass Unauthenticated remote attackers can reach the AOS-CX management REST API by smuggling a login token through nginx's over-permissive version regex, exposing the OVSDB-backed configuration surface including the hashed admin credential. CVE:...

CVE-2020-7200

CVE-2020-7200 Download HPE SIM 7.6: https://support.hpe.com/hpesc/public/docDisplay?docId=emrna-c05350303N10011 Details: https://support.hpe.com/hpesc/public/docDisplay?docLocale=enUS&docId=hpesbgn04068enus 🎞 Video: https://www.youtube.com/watch?v=QNhcNJtjKyw HPE does not provide a patch but only...

CVE-2025-37164

CVE-2025-37164 A remote code execution issue exists in HPE OneView. How does this detection method work? This template matches on the OneView title tag, extracts the version from the JavaScript artifactVersion variable, and flags instances running versions below 11.00 as potentially vulnerable...

HPE-iMC-7.3-RMI-Java-Deserialization

HPE iMC 7.3 Java RMI Registry Deserialization RCE Vulnerability CVE ID CVE-2017-5792 Exploit Vendor Homepage: www.hpe.com Version: iMC PLAT v7.3 E0504 Standard Tested on: Windows Server 2008 R2 Enterprise 64-bit note that this PoC will launch calc.exe $ java -cp ysoserial-0.0.6-SNAPSHOT-all.jar...

Exploit_CVE-2025-37164

ExploitCVE-2025-37164 ! This Script is made for educational purpose only Exploit for the CVE-2025-37164 Description : This script provide a simple exploit for the CVE-2025-37164 impacting HPE OneView that can be used to validate if an asset is vulnerable. usage : git clone...

CVE-2017-12561

CVE-2017-12561 - HPE iMC dbman Use-After-Free Technical analysis of CVE-2017-12561, a use-after-free vulnerability in the dbman service of Hewlett Packard Enterprise Intelligent Management Center iMC. Overview The vulnerability affects the service's handling of opcode 10012. Incorrect object...

CVE-2025-37164-PoC

CVE-2025-37164 - HPE OneView Unauthenticated RCE PoC Proof-of-Concept exploit for CVE-2025-37164, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in HPE OneView. DISCLAIMER THIS SOFTWARE IS PROVIDED FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING PURPOSES ONLY. Use only o...

HPE Smart Update Manager < 8.5.6 - Remote Unauthorized Access

HPE Smart Update Manager SUM prior to version 8.5.6 could allow remote unauthorized access. id: CVE-2020-7136 info: name: HPE Smart Update Manager 8.5.6 - Remote Unauthorized Access author: gy741 severity: critical description: HPE Smart Update Manager SUM prior to version 8.5.6 could allow remot...

HPESBGN05175 rev.1 - HPE CloudPhysics appliance, intermediate certificate vulnerability

Potential Security Impact: Remote: Indirect Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE CloudPhysics - Prior to v3.4.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-111943 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N | 6.8...

Vulnerabilities in HPE Networking AOS

HPE has identified 72 vulnerabilities in HPE Networking’s AOS-8 and AOS-10 platforms, including Mobility Conductors, Mobility Controllers, Mobility Gateways, and Access Points. These vulnerabilities involve various security issues, such as authentication bypass, command and SQL injection, buffer...

HPE Integrated Lights-out 4 (ILO4) <2.53 - Authentication Bypass

HPE Integrated Lights-out 4 iLO 4 prior to 2.53 was found to contain an authentication bypass and code execution vulnerability. id: CVE-2017-12542 info: name: HPE Integrated Lights-out 4 ILO4 2.53 - Authentication Bypass author: pikpikcu severity: critical description: HPE Integrated Lights-out 4...

CVE-2026-79883

A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network...

CVE-2026-79883

CVE-2026-79883 identifies an unauthenticated adjacent buffer overflow vulnerability in the PAPI Protocol affecting AOS-10 . This vulnerability can lead to sensitive information disclosure . While the base CVSS score is 8.3 (High), the provided documents do not specify the exact root cause, affect...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a buffer overflow issue in the PAPI protocol, which may allow authenticated remote attackers with elevated privileges to execute remote code execution and run arbitrary code as a privileged user on the underlying operating system...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a lack of boundary checks in the underlying operating system. Unauthenticated remote attackers can exploit this vulnerability, potentially executing arbitrary code with privileges on the underlying OS...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a command injection flaw in the PAPI protocol. An attacker adjacent to the target can send specially crafted packets to achieve unauthenticated remote code execution. Successful exploitation of this vulnerability allows arbitrary code...

PT-2026-121616

⚠️ A severe vulnerability was disclosed for HPE AOS-10 CVE-2026-79877 vuldb.​com/vuln/425543 https://t.co/Px6RRJ7IGz...

HPESBNW05162 rev.1 - Multiple Vulnerabilities in HPE Networking Wireless Operating Systems (AOS-10 & AOS-8)

Potential Security Impact: Local: Access Restriction Bypass; Remote: Arbitrary Code Execution, Cross-Site Scripting XSS, memory corruption, local memory corruption, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. ArubaOS SD-WAN Gateways - Please refer to...