Vulnerabilities (CVE)

Filtered by vendor Hp Subscribe
Total 2530 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-42397 1 Hp 1 Instantos 2026-06-17 N/A 5.3 MEDIUM
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.
CVE-2024-42396 1 Hp 1 Instantos 2026-06-17 N/A 5.3 MEDIUM
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point.
CVE-2024-42395 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 9.8 CRITICAL
There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
CVE-2024-42394 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 9.8 CRITICAL
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
CVE-2024-42393 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 9.8 CRITICAL
There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
CVE-2024-41913 1 Hp 1 Poly Clariti Manager 2026-06-17 N/A 8.8 HIGH
A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly sanitize User input.
CVE-2024-41912 1 Hp 1 Poly Clariti Manager 2026-06-17 N/A 9.8 CRITICAL
A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls.
CVE-2024-41911 1 Hp 1 Poly Clariti Manager 2026-06-17 N/A 5.4 MEDIUM
A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The flaw does not properly neutralize input during a web page generation.
CVE-2024-41910 1 Hp 1 Poly Clariti Manager 2026-06-17 N/A 6.1 MEDIUM
A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware contained multiple XSS vulnerabilities in the version of JavaScript used.
CVE-2024-3281 1 Hp 6 Poly Ccx 350, Poly Ccx 400, Poly Ccx 500 and 3 more 2026-06-17 N/A 8.8 HIGH
A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process did not properly restrict access to a resource from an unauthorized actor.
CVE-2024-38320 6 Apple, Hp, Ibm and 3 more 8 Macos, Hp-ux, Aix and 5 more 2026-06-17 N/A 5.9 MEDIUM
IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2024-31483 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 4.9 MEDIUM
An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to read arbitrary files in the underlying operating system.
CVE-2024-31482 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 5.3 MEDIUM
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected Access Point.
CVE-2024-31481 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 5.3 MEDIUM
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.
CVE-2024-31480 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 5.3 MEDIUM
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.
CVE-2024-31479 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 5.3 MEDIUM
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.
CVE-2024-31478 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 5.3 MEDIUM
Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point.
CVE-2024-31477 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 7.2 HIGH
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2024-31476 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 7.2 HIGH
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2024-31475 2 Arubanetworks, Hp 2 Arubaos, Instantos 2026-06-17 N/A 8.2 HIGH
There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the affected Access Point.