HPESBGN05003 rev.1 - HPE AutoPass License Server (APLS), Remote Authentication Bypass Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE AutoPass License Server - Prior to 9.19 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-23600 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L ...

EUVD-2024-54780

Malicious code in bioql PyPI...

EUVD-2024-54781

Malicious code in bioql PyPI...

EUVD-2025-21732

Malicious code in bioql PyPI...

EUVD-2025-21733

Malicious code in bioql PyPI...

EUVD-2024-54782

Malicious code in bioql PyPI...

EUVD-2024-54783

Malicious code in bioql PyPI...

EUVD-2025-21734

Malicious code in bioql PyPI...

CVE-2025-37106

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37105

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37107

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37105

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37106

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37107

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37107

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37107

CVE-2025-37107 : Authentication bypass in Hewlett Packard Enterprise AutoPass License Server (APLS) prior to 9.18. The flaw exists in the web service listening on TCP port 5814, arising from making an authorization decision based on a non-canonical URL. Remote attackers could bypass authenticatio...

CVE-2025-37107

An authentication bypass vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37106

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37106

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server APLS prior to 9.18...

CVE-2025-37106

CVE-2025-37106 affects Hewlett Packard Enterprise AutoPass License Server (APLS) prior to 9.18. Reports describe an authentication bypass and information disclosure via the web service (default port 5814) due to hard-coded credentials, allowing remote disclosure or configuration edits. Remediatio...