Known vulnerabilities in Hewlett Packard Enterprise (HPE) HPE OneView
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-37164 | Exploited Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability | 10.0 Critical | Dec 16, 2025 |
| CVE-2023-30909 | A remote authentication bypass issue exists in some OneView APIs | 9.8 Critical | Sep 14, 2023 |
| CVE-2023-30908 | A remote authentication bypass issue exists in a OneView API | 9.8 Critical | Sep 7, 2023 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
EdgeConnect SD-WAN Orchestrator 27
HPE Aruba Networking Wireless Operating System (AOS) 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20