CVE-2022-23700

A local unauthorized read access to files vulnerability was discovered in HPE OneView versions: Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView...

CVE-2023-50275

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2009-0556link is external Microsoft Office PowerPoint Code Injection Vulnerability CVE-2025-37164link is external HPE OneView Code Injection Vulnerability These...

HPE OneView Privilege Escalation

The vulnerability of the HPE OneView IT infrastructure management system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

PT-2025-51738

Name of the Vulnerable Software and Affected Versions HPE OneView versions prior to 11.00 Description HPE OneView contains a remote code execution issue that allows a remote unauthenticated user to execute arbitrary code. This vulnerability, tracked as CVE-2025-37164, has a CVSS score of 10.0 and...

EUVD-2014-2634

Malware in sbrugna...

EUVD-2022-33059

Malicious code in bioql PyPI...

EUVD-2022-33067

Malicious code in bioql PyPI...

EUVD-2022-28639

Malicious code in bioql PyPI...

HPESBGN04853 rev.1 - HPE OneView, Multiple Local and Remote Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, script injection; Remote: Code Execution, Disclosure of Information, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - All versions prior to v10.00 CVSS Scores: | CVE | CVSS Vecto...

CVE-2022-28625

A local disclosure of sensitive information vulnerability was discovered in HPE OneView versions: Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability...

Hewlett Packard Enterprise OneView security vulnerabilities

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView versions prior to 9.20 that stems from an information disclosure issue that could...

CVE-2023-50275

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service...

Hewlett Packard Enterprise OneView security vulnerabilities

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView that stems from a device dump that could expose proxy credential settings...

Hewlett Packard Enterprise OneView security vulnerabilities

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView prior to version 8.2 that stems from a device dump that could expose SNMPv3 read...

PT-2023-21546 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns the potential exposure of OneView user accounts through an HPE OneView appliance dump. Recommendations: At the moment, there is no information about a newer version...

Hewlett Packard Enterprise OneView data falsification vulnerability

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. Hewlett Packard Enterprise OneView has a security vulnerability that stems from inadequate validation of data authenticity vulnerabilities in hybrid...

CVE-2022-28625

A local disclosure of sensitive information vulnerability was discovered in HPE OneView versions: Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability...

HPESBGN04304 rev.2 - HPE OneView in Certain Configurations, Local Disclosure of Sensitive Information

Potential Security Impact: Local: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - Prior to 7.0 and 6.60.01 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-28625 |...

Hewlett Packard Enterprise OneView security vulnerabilities

HPE OneView is a software from Hewlett Packard Enterprise HPE that facilitates automated device management for IT departments. HPE OneView versions prior to 6.6 contain an information disclosure vulnerability that stems from a configuration or other error in the operation of the network system or...