CVE-2025-37164-PoC

CVE-2025-37164 - HPE OneView 未认证 RCE PoC 这是 CVE-2025-37164 的概念验证（PoC）利用程序，该漏洞是 HPE OneView 中的一个严重（CVSS 10.0）未认证远程代码执行漏洞。 免责声明 本软件仅供教育和授权安全测试目的使用。 仅可在您拥有或已获得明确书面许可的系统上使用 未经授权访问计算机系统属于违法行为 作者不对因使用本工具而造成的任何滥用或损害负责 本工具用于受控环境中的防御性安全研究和渗透测试 漏洞详情 CVE ID ：CVE-2025-37164 CVSS 分数 ：10.0（严重） 厂商 ：Hewlett...

CVE-2017-12561

CVE-2017-12561 - HPE iMC dbman Use-After-Free Análisis técnico de CVE-2017-12561, una vulnerabilidad de use-after-free en el servicio dbman de Hewlett Packard Enterprise Intelligent Management Center iMC. Descripción general La vulnerabilidad afecta el manejo del opcode 10012 por parte del...

CVE-2020-7200

CVE-2020-7200 下载 HPE SIM 7.6：https://support.hpe.com/hpesc/public/docDisplay?docId=emrna-c05350303N10011 详情：https://support.hpe.com/hpesc/public/docDisplay?docLocale=enUS&docId=hpesbgn04068enus 🎞 视频：https://www.youtube.com/watch?v=QNhcNJtjKyw HPE 不提供补丁，仅提供一个临时修复方案：直接删除 C:\Program Files\HP\Systems...

HPE System Management - Cross-Site Scripting

HPE System Management contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass

HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22 contains an authentication bypass vulnerability which could be remotely exploited to bypass remote authentication and possibly lead to execution of arbitrary commands, gaining...

HPESBST05160 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS) BSA-2026-3962, Multiple Vulnerabilities

Potential Security Impact: Local: Access Restriction Bypass, Arbitrary Code Execution, Escalation of Privilege, Buffer Overflow; Remote: Access Restriction Bypass, Arbitrary Code Execution, Bypass Security Restrictions, Denial of Service DoS, Unauthorized Access, Unauthorized Data Injection, Buff...

HPESBST05161 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS) BSA-2026-3961, Multiple Vulnerabilities

Potential Security Impact: Local: Authentication Bypass, Denial of Service DoS, Disclosure of Information, Escalation of Privilege; Remote: Arbitrary Code Execution, Arbitrary File Deletion, Denial of Service DoS, Escalation of Privilege, URL Redirection, Unauthorized Access to Application...

CVE-2026-79842

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

CVE-2026-79842

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

CVE-2026-79842

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

CVE-2026-79842

An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) in versions prior to v7.3 E0713 . This flaw allows for unauthorized access, potentially impacting confidentiality and integrity with a CVSS v3.1 score of 9.1 . No specific root cause or exploit code is provid...

EUVD-2026-95262

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

HPE-iMC-7.3-RMI-Java-Deserialization

HPE iMC 7.3 Java RMI 注册表反序列化 RCE 漏洞 CVE ID CVE-2017-5792 漏洞利用 厂商主页：www.hpe.com 版本：iMC PLAT v7.3 E0504 标准版 测试环境：Windows Server 2008 R2 Enterprise 64-bit 注意：此 PoC 将启动 calc.exe $ java -cp ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.RMIRegistryExploit 192.168.1.100 21195 CommonsBeanutils1...

HPESBNW05165 rev. 1 - Multiple Vulnerabilities in HPE Telco Intelligent Assurance

Potential Security Impact: Remote: Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Assurance FAS/PDO v4.2.17 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-100655 |...

PT-2026-108209

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

HPESBNW05157 rev.1 - HPE Intelligent Management Center (iMC), Remote Authentication Bypass Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC - Prior to v7.3 E0713 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-79842 |...

HPE Smart Update Manager < 8.5.6 - Remote Unauthorized Access

HPE Smart Update Manager SUM prior to version 8.5.6 could allow remote unauthorized access. id: CVE-2020-7136 info: name: HPE Smart Update Manager 8.5.6 - Remote Unauthorized Access author: gy741 severity: critical description: HPE Smart Update Manager SUM prior to version 8.5.6 could allow remot...

CVE-2026-79817

A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an attacker with local access to the affected system to obtain sensitive information...

CVE-2026-79816

A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting XSS attack against a user of the affected client interface. Successful exploitation could allow an attacker to execute...

CVE-2026-79810

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the...