SecAlerts
h

hewlett packard enterprise

Security Risk Profile

56
/100
medium

Security Risk Score

Comprehensive risk assessment based on 89 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from February 15, 2018 to present

89
Total CVEs
15
Critical+High
1
Exploited
15
Unpatched

Threat Assessment

Avg CVSS
7.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
15
Critical/High
Risk Level
56/100
medium
⚠️ 1 Active Exploits🆕 6Fresh (<7d)📈 6 in Last 30 Days

Severity Distribution

Critical
9
High
6
Medium
8
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
Command Injection
4
2
Path Traversal
2
3
Infoleak
1
4
SSRF
1
5
CSRF
1

Most Affected Products

1. Hewlett Packard Enterprise AutoPass License Server18
2. Hewlett Packard Enterprise OneView18
3. Hewlett Packard Enterprise StoreOnce VSA16
4. Hewlett Packard Enterprise Insight Remote Support12
5. Hewlett Packard Enterprise microcode_ctl6

Recent Vulnerabilities

See more →
https://reddit.com/r/sysadmin/comments/1rrld2x/hpe_aruba_networking_aoscx_multiple/
unknown

HPE Aruba Networking AOS-CX Multiple Vulnerabilities

Mar 12, 2026🔧 No Patch
https://www.bleepingcomputer.com/news/security/hpe-warns-of-critical-aos-cx-flaw-allowing-admin-password-resets/
unknown

HPE warns of critical AOS-CX flaw allowing admin password resets

Mar 10, 2026🔧 No Patch
ZDI-26-134
unknown

Hewlett Packard Enterprise AutoPass License Server Authentication Bypass Vulnerability

Mar 3, 2026🔧 No Patch
ZDI-CAN-27634
unknown

ZDI-26-134: Hewlett Packard Enterprise AutoPass License Server Authentication Bypass Vulnerability

Mar 3, 2026🔧 No Patch
CVE-2026-23600
CVSS 10.0critical
Mar 2, 2026🔧 No Patch
CVE-2026-23599
CVSS 7.8high

Local Privilege Escalation Vulnerability in HPE Aruba Networking Clear Pass Policy Manager OnGuard for Linux

Feb 17, 2026🔧 No Patch
CVE-2026-23597
CVSS 6.5medium

Unauthenticated Information Disclosure in application API allows sensitive system information exposure

Feb 17, 2026
CVE-2026-23593
CVSS 7.5EPSS 0%high

Unauthenticated Limited File Read allows Data Exposure in Web Interface

Jan 27, 2026🔧 No Patch
https://www.bleepingcomputer.com/news/security/cisa-tags-max-severity-hpe-oneview-flaw-as-actively-exploited/
unknown

CISA tags max severity HPE OneView flaw as actively exploited

Jan 8, 2026⚠ Exploited🔧 No Patch
https://www.theregister.com/2025/12/19/hpe_oneview_rce_bug/
unknown

HPE tells customers to patch fast as OneView RCE bug scores a perfect 10

Dec 19, 2025🔧 No Patch

Monitor hewlett packard enterprise in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.