Known vulnerabilities in HPE OneView

Vendor: HPE
Software: HPE OneView
Software CPE: cpe:2.3:a:hpe:hpe_oneview:*:*:*:*:*:*:*:*
Website: https://www.hpe.com
Total vulnerabilities: 22
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HPE OneView HPE OneView is affected by 22 known vulnerabilities: 2 critical, 8 high, 9 medium, 3 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120198 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-37164		 CWE-94 Critical
Available
Exploited
 11.00 18.12.2025 SB2025121885
#VU117455 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23706		 CWE-79 Medium
No
No
 7.00.00 22.10.2025 SB2022051645
#VU117454 - Server-Side Request Forgery (SSRF)
CVE-2022-28616		 CWE-918 High
No
No
 7.00.00 22.10.2025 SB2022051645
#VU117453 - Security Features
CVE-2022-28617		 CWE-254 High
No
No
 7.00.00 22.10.2025 SB2022051645
#VU99263 - Improper Access Control
CVE-2024-42508		 CWE-284 Low
No
No
 9.20.00 22.10.2024 SB20241022398
#VU93544 - Improper input validation
CVE-2024-38477		 CWE-20 Medium
No
No
 10.00 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476		 CWE-918 High
No
No
 10.00 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93542 - Improper input validation
CVE-2024-38475		 CWE-20 Critical
Available
No
 10.00 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU88822 - Memory corruption
CVE-2024-2961		 CWE-119 High
Available
Exploited
 10.00 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU82908 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-30912		 CWE-94 Low
No
No
 8.60.00 08.11.2023 SB2023110804
#VU80824 - Improper Authentication
CVE-2023-30909		 CWE-287 High
No
No
 8.30.01 15.09.2023 SB2023091524
#VU80822 - Improper Authentication
CVE-2023-30908		 CWE-287 High
No
No
 8.30.01 15.09.2023 SB2023091524
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 8.50.00 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU72085 - Improper input validation
CVE-2022-48279		 CWE-20 Medium
No
No
 8.90.00 09.02.2023 SB2023020946
SB2023020948
SB2023020949
and 15 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 8.50.00 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU67532 - Use After Free
CVE-2022-40674		 CWE-416 High
No
No
 8.1 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU59052 - Uncontrolled Recursion
CVE-2021-42717		 CWE-674 Medium
No
No
 8.90.00 19.12.2021 SB2021121901
SB2021121902
SB2023011845
and 5 more
#VU11535 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2010-5298		 CWE-362 Medium
No
No
 - 04.04.2018 SB2014060503
SB2015050501
SB2014072701
and 10 more
#VU11534 - NULL Pointer Dereference
CVE-2014-0198		 CWE-476 Medium
No
No
 - 04.04.2018 SB2014060503
SB2015050501
SB2015092635
and 12 more
#VU2950 - Cryptographic Issues
CVE-2014-0224		 CWE-310 Medium
Available
No
 - 30.11.-0001 SB2014060501
SB2014060502
SB2014060503
and 42 more


Showing elements 1 - 20 out of 22