| CVE-2026-23818 | CRÍTICO9.6 | A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the login flow using a crafted URL. Successful exploitation may redirect an authenticated user to an attacker-controlled serve | 07/04/2026 |
| CVE-2026-23600 | CRÍTICO9.8 | A remote authentication bypass vulnerability
exists in HPE AutoPass License Server (APLS). | 02/03/2026 |
| CVE-2026-23598 | MÉDIO6.5 | Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well as to gain insight in | 17/02/2026 |
| CVE-2026-23597 | MÉDIO6.5 | Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well as to gain insight in | 17/02/2026 |
| CVE-2026-23596 | MÉDIO6.5 | A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability. | 17/02/2026 |
| CVE-2026-23595 | ALTO8.8 | An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or m | 17/02/2026 |
| CVE-2025-37164KEV | CRÍTICO9.8 | A remote code execution issue exists in HPE OneView. | 16/12/2025 |
| CVE-2025-37107 | CRÍTICO9.8 | An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. | 16/07/2025 |
| CVE-2025-37106 | CRÍTICO9.8 | An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. | 16/07/2025 |
| CVE-2025-37105 | CRÍTICO9.8 | An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. | 16/07/2025 |
| CVE-2024-51770 | ALTO7.5 | An information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. | 14/07/2025 |
| CVE-2024-51769 | ALTO7.5 | An information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. | 14/07/2025 |
| CVE-2024-51768 | ALTO8.0 | An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. | 14/07/2025 |
| CVE-2024-51767 | ALTO7.3 | An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17. | 14/07/2025 |
| CVE-2025-37099 | CRÍTICO9.8 | A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646. | 01/07/2025 |
| CVE-2025-37098 | ALTO7.5 | A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646. | 01/07/2025 |
| CVE-2025-37097 | ALTO7.5 | A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service | 01/07/2025 |
| CVE-2025-37096 | CRÍTICO9.8 | A command injection remote code execution vulnerability exists in HPE StoreOnce Software. | 02/06/2025 |
| CVE-2025-37095 | CRÍTICO9.8 | A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software. | 02/06/2025 |
| CVE-2025-37094 | CRÍTICO9.1 | A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software. | 02/06/2025 |