Overview 1,190 matches · 8 in Waratek scope · 5 protected · 16 exploited · 2 CISA KEV · 163 public PoC · 91 EPSS ≥ 0.5
1,190matches
8in Waratek scope0.7%
5protected0.4%
16exploited1.3%
2CISA KEV0.2%
163public PoC13.7%
91EPSS ≥ 0.57.6%
Protected by Waratek
5
0.4%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
3
0.3%
Outside Waratek scope
13
1.1%
Not applicable
1,169
98.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
5
0.4%
partly blocked
0
0.0%
not blocked
1,185
99.6%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 143 / year
19901
Not applicable1
High1
not blocked1
No public exploit1
19911
Not applicable1
High1
not blocked1
No public exploit1
19920
19930
19943
Not applicable3
High3
not blocked3
No public exploit3
19951
Not applicable1
High1
not blocked1
No public exploit1
199612
Not applicable12
High12
not blocked12
Working exploit published2
No public exploit10
199715
Not applicable15
High15
not blocked15
Working exploit published4
No public exploit11
19987
Not applicable7
High7
not blocked7
Exploited1
Working exploit published3
No public exploit3
19999
Not applicable9
High9
not blocked9
Working exploit published1
No public exploit8
200014
Not applicable14
High14
not blocked14
Working exploit published8
No public exploit6
200124
No exploit published1
Not applicable23
High24
not blocked24
Exploited1
Working exploit published4
No public exploit19
200228
Outside Waratek scope1
Not applicable27
High28
not blocked28
Working exploit published9
No public exploit19
200328
Not applicable28
High28
not blocked28
Exploited3
Working exploit published11
No public exploit14
200413
Outside Waratek scope1
Not applicable12
High13
not blocked13
No public exploit13
200519
Outside Waratek scope1
Not applicable18
High19
not blocked19
Working exploit published5
Forecast only1
No public exploit13
200617
Not applicable17
High17
not blocked17
Working exploit published1
No public exploit16
200735
Not applicable35
High35
not blocked35
Working exploit published13
No public exploit22
200843
Not applicable43
High43
not blocked43
Working exploit published11
No public exploit32
200957
Not applicable57
High57
not blocked57
Working exploit published15
No public exploit42
201044
Not applicable44
High44
not blocked44
Working exploit published15
No public exploit29
201177
Not applicable77
High77
not blocked77
Working exploit published11
No public exploit66
201245
Not applicable45
High45
not blocked45
Working exploit published10
Forecast only1
No public exploit34
201379
Not applicable79
High79
not blocked79
Exploited1
Working exploit published15
Forecast only9
No public exploit54
201456
Outside Waratek scope1
Not applicable55
High56
not blocked56
Exploited2
Working exploit published4
No public exploit50
201551
Not applicable51
High51
not blocked51
Exploited2
Working exploit published1
No public exploit48
201658
No exploit published2
Outside Waratek scope3
Not applicable53
High58
not blocked58
Exploited3
Forecast only3
No public exploit52
20178
Not applicable8
High8
not blocked8
No public exploit8
2018143
Protected by Waratek4
Outside Waratek scope3
Not applicable136
High143
blocked by ARMR today4
not blocked139
Exploited2
Working exploit published5
Forecast only1
No public exploit135
2019114
Protected by Waratek1
Outside Waratek scope3
Not applicable110
High114
blocked by ARMR today1
not blocked113
Exploited1
Working exploit published2
Forecast only3
No public exploit108
202041
Not applicable41
High41
not blocked41
Working exploit published2
Proof of concept only1
No public exploit38
202110
Not applicable10
High10
not blocked10
No public exploit10
202235
Not applicable35
High35
not blocked35
No public exploit35
202369
Not applicable69
High69
not blocked69
No public exploit69
202421
Not applicable21
High21
not blocked21
No public exploit21
20257
Not applicable7
High7
not blocked7
No public exploit7
20265
Not applicable5
High5
not blocked5
No public exploit5
1990199319961999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-91105 | High | 2026-09-16 | Not applicable | No public exploit | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. |
| CVE-2026-91102 | High | 2026-09-16 | Not applicable | No public exploit | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. |
| CVE-2026-91098 | High | 2026-09-16 | Not applicable | No public exploit | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. |
| CVE-2026-91097 | High | 2026-09-16 | Not applicable | No public exploit | HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. |
| CVE-2026-8632 | High | 2026-05-20 | Not applicable | No public exploit | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection. |
| CVE-2025-14432 | High | 2025-12-16 | Not applicable | No public exploit | In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to Microsoft TAC and does not affect configuration changes made using the provisioning server or the device WebUI. |
| CVE-2025-11761 | High | 2025-11-03 | Not applicable | No public exploit | A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerability. |
| CVE-2025-43017 | High | 2025-10-28 | Not applicable | No public exploit | HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities. |
| CVE-2025-43491 | High | 2025-09-09 | Not applicable | No public exploit | A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted. |
| CVE-2025-43022 | High | 2025-07-22 | Not applicable | No public exploit | A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow a privileged user to execute SQL commands. HP has addressed the issue in the latest software update. |
| CVE-2025-43026 | High | 2025-06-05 | Not applicable | No public exploit | A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write. |
| CVE-2025-26508 | High | 2025-02-14 | Not applicable | No public exploit | Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job. |
| CVE-2024-9579 | High | 2024-11-05 | Not applicable | No public exploit | A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself. |
| CVE-2024-5749 | High | 2024-10-15 | Not applicable | No public exploit | Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials. |
| CVE-2024-41913 | High | 2024-08-06 | Not applicable | No public exploit | A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize User input. |
| CVE-2022-27540 | High | 2024-06-28 | Not applicable | No public exploit | A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability. |
| CVE-2024-6147 | High | 2024-06-20 | Not applicable | No public exploit | Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Spokes Update Service. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18271. |
| CVE-2024-2301 | High | 2024-05-23 | Not applicable | No public exploit | Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack via the web management interface of the device. |
| CVE-2024-31482 | High | 2024-05-14 | Not applicable | No public exploit | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected Access Point. |
| CVE-2024-31481 | High | 2024-05-14 | Not applicable | No public exploit | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service. |
| CVE-2024-31480 | High | 2024-05-14 | Not applicable | No public exploit | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service. |
| CVE-2024-31479 | High | 2024-05-14 | Not applicable | No public exploit | Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service. |
| CVE-2024-31478 | High | 2024-05-14 | Not applicable | No public exploit | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point. |
| CVE-2024-31477 | High | 2024-05-14 | Not applicable | No public exploit | Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. |
| CVE-2024-31476 | High | 2024-05-14 | Not applicable | No public exploit | Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. |
| CVE-2024-31475 | High | 2024-05-14 | Not applicable | No public exploit | There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the affected Access Point. |
| CVE-2024-31474 | High | 2024-05-14 | Not applicable | No public exploit | There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the affected Access Point |
| CVE-2024-28893 | High | 2024-05-01 | Not applicable | No public exploit | Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs). |
| CVE-2024-3281 | High | 2024-04-09 | Not applicable | No public exploit | A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process did not properly restrict access to a resource from an unauthorized actor. |
| CVE-2024-1869 | High | 2024-03-01 | Not applicable | No public exploit | Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when using the general-purpose gateway (GGW) over port 9220. |
| CVE-2023-6138 | High | 2024-02-14 | Not applicable | No public exploit | A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability. |
| CVE-2023-50275 | High | 2024-01-23 | Not applicable | No public exploit | HPE OneView may allow clusterService Authentication Bypass resulting in denial of service. |
| CVE-2023-50274 | High | 2024-01-23 | Not applicable | No public exploit | HPE OneView may allow command injection with local privilege escalation. |
| CVE-2023-50271 | High | 2023-12-17 | Not applicable | No public exploit | A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability could be exploited locally or remotely to disclose information. |
| CVE-2023-4694 | High | 2023-12-14 | Not applicable | No public exploit | Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when sending a SOAP message to the service on TCP port 3911 that contains a body but no header. |
| CVE-2023-45626 | High | 2023-11-14 | Not applicable | No public exploit | An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles. |
| CVE-2023-45625 | High | 2023-11-14 | Not applicable | No public exploit | Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. |
| CVE-2023-45624 | High | 2023-11-14 | Not applicable | No public exploit | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point. |
| CVE-2023-45623 | High | 2023-11-14 | Not applicable | No public exploit | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point. |
| CVE-2023-45622 | High | 2023-11-14 | Not applicable | No public exploit | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point. |
| CVE-2023-45621 | High | 2023-11-14 | Not applicable | No public exploit | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point. |
| CVE-2023-45620 | High | 2023-11-14 | Not applicable | No public exploit | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point. |
| CVE-2023-45619 | High | 2023-11-14 | Not applicable | No public exploit | There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point. |
| CVE-2023-45618 | High | 2023-11-14 | Not applicable | No public exploit | There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point. |
| CVE-2023-45617 | High | 2023-11-14 | Not applicable | No public exploit | There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point. |
| CVE-2023-5739 | High | 2023-10-31 | Not applicable | No public exploit | Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege. |
| CVE-2023-5671 | High | 2023-10-25 | Not applicable | No public exploit | HP Print and Scan Doctor for Windows may potentially be vulnerable to escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability. |
| CVE-2023-26300 | High | 2023-10-18 | Not applicable | No public exploit | A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privilege. HP is releasing firmware updates to mitigate the potential vulnerability. |
| CVE-2023-4499 | High | 2023-10-13 | Not applicable | No public exploit | A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure. HP is releasing mitigation for the potential vulnerability. |
| CVE-2015-2202 | High | 2023-09-05 | Not applicable | No public exploit | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS. |
| CVE-2015-2201 | High | 2023-09-05 | Not applicable | No public exploit | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users. |
| CVE-2015-1391 | High | 2023-09-05 | Not applicable | No public exploit | Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism. |
| CVE-2022-4894 | High | 2023-08-16 | Not applicable | No public exploit | Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element. |
| CVE-2023-38402 | High | 2023-08-15 | Not applicable | No public exploit | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft Windows operating System boot process. |
| CVE-2023-38401 | High | 2023-08-15 | Not applicable | No public exploit | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system. |
| CVE-2023-35178 | High | 2023-06-30 | Not applicable | No public exploit | Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs. |
| CVE-2023-35177 | High | 2023-06-30 | Not applicable | No public exploit | Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser. |
| CVE-2023-35176 | High | 2023-06-30 | Not applicable | No public exploit | Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device. |
| CVE-2023-26299 | High | 2023-06-30 | Not applicable | No public exploit | A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability. |
| CVE-2022-31646 | High | 2023-06-14 | Not applicable | No public exploit | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31645 | High | 2023-06-14 | Not applicable | No public exploit | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31644 | High | 2023-06-14 | Not applicable | No public exploit | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31642 | High | 2023-06-14 | Not applicable | No public exploit | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31641 | High | 2023-06-14 | Not applicable | No public exploit | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31640 | High | 2023-06-14 | Not applicable | No public exploit | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2023-1707 | High | 2023-06-13 | Not applicable | No public exploit | Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled with FutureSmart version 5.6. |
| CVE-2022-31639 | High | 2023-06-13 | Not applicable | No public exploit | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31638 | High | 2023-06-13 | Not applicable | No public exploit | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31637 | High | 2023-06-13 | Not applicable | No public exploit | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31636 | High | 2023-06-13 | Not applicable | No public exploit | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31635 | High | 2023-06-13 | Not applicable | No public exploit | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2023-26298 | High | 2023-06-12 | Not applicable | No public exploit | Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. |
| CVE-2023-26297 | High | 2023-06-12 | Not applicable | No public exploit | Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. |
| CVE-2023-26296 | High | 2023-06-12 | Not applicable | No public exploit | Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. |
| CVE-2023-26294 | High | 2023-06-12 | Not applicable | No public exploit | Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. |
| CVE-2022-43778 | High | 2023-06-12 | Not applicable | No public exploit | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. |
| CVE-2022-43777 | High | 2023-06-12 | Not applicable | No public exploit | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. |
| CVE-2022-27541 | High | 2023-06-12 | Not applicable | No public exploit | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. |
| CVE-2022-27539 | High | 2023-06-12 | Not applicable | No public exploit | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. |
| CVE-2019-16283 | High | 2023-06-09 | Not applicable | No public exploit | A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution. |
| CVE-2023-22790 | High | 2023-05-08 | Not applicable | No public exploit | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. |
| CVE-2023-22789 | High | 2023-05-08 | Not applicable | No public exploit | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. |
| CVE-2023-22788 | High | 2023-05-08 | Not applicable | No public exploit | Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system. |
| CVE-2023-22787 | High | 2023-05-08 | Not applicable | No public exploit | An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point. |
| CVE-2023-28089 | High | 2023-04-25 | Not applicable | No public exploit | An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules |
| CVE-2023-28088 | High | 2023-04-25 | Not applicable | No public exploit | An HPE OneView appliance dump may expose SAN switch administrative credentials |
| CVE-2023-28083 | High | 2023-03-22 | Not applicable | No public exploit | A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out. |
| CVE-2022-43779 | High | 2023-02-12 | Not applicable | No public exploit | A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS) which might allow arbitrary code execution, denial of service, and information disclosure. AMI has released updates to mitigate the potential vulnerability. |
| CVE-2022-3990 | High | 2023-02-01 | Not applicable | No public exploit | HPSFViewer might allow Escalation of Privilege. This potential vulnerability was remediated on July 29th, 2022. Customers who opted for automatic updates should have already received the remediation. |
| CVE-2022-27538 | High | 2023-02-01 | Not applicable | No public exploit | A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability. |
| CVE-2022-27537 | High | 2023-02-01 | Not applicable | No public exploit | Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities. |
| CVE-2022-23455 | High | 2023-02-01 | Not applicable | No public exploit | Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files. |
| CVE-2022-23454 | High | 2023-02-01 | Not applicable | No public exploit | Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files. |
| CVE-2022-23453 | High | 2023-02-01 | Not applicable | No public exploit | Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files. |
| CVE-2021-3809 | High | 2023-02-01 | Not applicable | No public exploit | Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities. |
| CVE-2021-3808 | High | 2023-02-01 | Not applicable | No public exploit | Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities. |
| CVE-2021-3439 | High | 2023-02-01 | Not applicable | No public exploit | HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities. |
| CVE-2022-46359 | High | 2023-01-30 | Not applicable | No public exploit | Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure. |
| CVE-2022-46358 | High | 2023-01-30 | Not applicable | No public exploit | Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure. |
| CVE-2022-46357 | High | 2023-01-30 | Not applicable | No public exploit | Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure. |