Hpe Oneview (Hewlett Packard Enterprise) - vulnerabilities (CVEs)

7 CVEs, 3 in the last 30 days, 2 known versions, newest CVE from 2026-09-29. Vendor: Hewlett Packard Enterprise.

CVEs of Hpe Oneview

• CVE-2026-76720 - CVSS 4.3 (medium), 2026-09-29: A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect.
• CVE-2026-76719 - CVSS 8.2 (high), 2026-09-29: A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions.
• CVE-2026-76718 - CVSS 8.2 (high), 2026-09-29: A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions.
• CVE-2023-6573 - CVSS 5.5 (medium), 2024-01-23: HPE OneView may have a missing passphrase during restore.
• CVE-2023-50275 - CVSS 7.5 (high), 2024-01-23: HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.
• CVE-2023-50274 - CVSS 7.8 (high), 2024-01-23: HPE OneView may allow command injection with local privilege escalation.
• CVE-2023-28084 - CVSS 5.5 (medium), 2023-04-25: HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens