Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-37087 State: PUBLISHED Published: 2025-04-22T20:58:58.516Z Last Updated: 2025-05-07T19:43:51.078Z Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Performance Cluster Manager (HPCM) Description: A vulnerability in the cmdb service of the HPE Performance Cluster Manager (HPCM) could allow an attacker to gain access to an arbitrary file on the server host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04840en_us&docLocale=en_US
CVE ID: CVE-2025-37088 State: PUBLISHED Published: 2025-04-22T21:55:32.657Z Last Updated: 2025-04-25T14:38:41.877Z Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Cray Data Virtualization Service (DVS) Description: A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04749en_us&docLocale=en_US
CVE ID: CVE-2025-37089 State: PUBLISHED Published: 2025-06-02T13:21:24.852Z Last Updated: 2025-06-03T03:55:19.569Z Vendors: Hewlett Packard Enterprise (HPE) Products: HPE StoreOnce Software Description: A command injection remote code execution vulnerability exists in HPE StoreOnce Software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US
CVE ID: CVE-2025-37090 State: PUBLISHED Published: 2025-06-02T13:26:46.823Z Last Updated: 2025-06-02T15:46:56.756Z Vendors: Hewlett Packard Enterprise (HPE) Products: HPE StoreOnce Software Description: A server-side request forgery vulnerability exists in HPE StoreOnce Software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US
CVE ID: CVE-2025-37091 State: PUBLISHED Published: 2025-06-02T13:31:54.938Z Last Updated: 2025-06-03T03:55:20.643Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE StoreOnce Software Description: A command injection remote code execution vulnerability exists in HPE StoreOnce Software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US
CVE ID: CVE-2025-37092 State: PUBLISHED Published: 2025-06-02T13:53:14.814Z Last Updated: 2025-06-03T03:55:21.693Z Vendors: Hewlett Packard Enterprise (HPE) Products: HPE StoreOnce Software Description: A command injection remote code execution vulnerability exists in HPE StoreOnce Software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US
CVE ID: CVE-2025-37093 State: PUBLISHED Published: 2025-06-02T13:56:18.942Z Last Updated: 2025-06-03T03:55:22.726Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE StoreOnce Software Description: An authentication bypass vulnerability exists in HPE StoreOnce Software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US
CVE ID: CVE-2025-37094 State: PUBLISHED Published: 2025-06-02T14:02:13.590Z Last Updated: 2025-06-02T15:53:54.209Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE StoreOnce Software Description: A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US
CVE ID: CVE-2025-37095 State: PUBLISHED Published: 2025-06-02T14:14:51.450Z Last Updated: 2025-06-02T15:47:41.560Z Vendors: Hewlett Packard Enterprise (HPE) Products: HPE StoreOnce Software Description: A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US
CVE ID: CVE-2025-37096 State: PUBLISHED Published: 2025-06-02T14:18:10.669Z Last Updated: 2025-06-03T03:55:23.788Z Vendors: Hewlett Packard Enterprise (HPE) Products: HPE StoreOnce Software Description: A command injection remote code execution vulnerability exists in HPE StoreOnce Software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US
CVE ID: CVE-2025-37097 State: PUBLISHED Published: 2025-07-01T14:06:43.175Z Last Updated: 2025-07-01T14:27:32.630Z Vendors: Hewlett Packard Enterprise Products: Insight Remote Support Description: A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04878en_us&docLocale=en_US
CVE ID: CVE-2025-37098 State: PUBLISHED Published: 2025-07-01T14:39:11.831Z Last Updated: 2025-07-01T14:55:36.836Z Vendors: Hewlett Packard Enterprise Products: Insight Remote Support Description: A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04878en_us&docLocale=en_US
CVE ID: CVE-2025-37099 State: PUBLISHED Published: 2025-07-01T17:30:25.166Z Last Updated: 2025-07-18T03:55:35.688Z Vendors: Hewlett Packard Enterprise Products: Insight Remote Support Description: A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04878en_us&docLocale=en_US
CVE ID: CVE-2025-37100 State: PUBLISHED Published: 2025-06-10T15:05:55.025Z Last Updated: 2025-06-10T15:19:27.298Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking Private 5G Core Description: A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system files containing sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/p
sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04883en_us&docLocale=en_US
CVE ID: CVE-2025-37101 State: PUBLISHED Published: 2025-06-26T05:19:02.298Z Last Updated: 2025-06-27T03:55:24.243Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H) Vendors: Hewlett Packard Enterprise Products: HPE OneView for VMware vCenter Problem Types: CWE-269 Description: A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC). This vulnerability could be exploited allowing an attacker with read only privilege to cause Vertical Privilege Escalation (operator can perform admin actions). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04876en_us&docLo
es: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04876en_us&docLocale=en_US
CVE ID: CVE-2025-37102 State: PUBLISHED Published: 2025-07-08T19:08:15.395Z Last Updated: 2025-07-08T19:43:11.374Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Networking Instant On Description: An authenticated command injection vulnerability exists in the Command line interface of HPE Networking Instant On Access Points. A successful exploitation could allow a remote attacker with elevated privileges to execute arbitrary commands on the underlying operating system as a highly privileged user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04894en_us&docLocale=en_US
CVE ID: CVE-2025-37103 State: PUBLISHED Published: 2025-07-08T19:09:30.415Z Last Updated: 2025-07-08T19:39:53.871Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Networking Instant On Description: Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow a remote attacker to gain administrative access to the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04894en_us&docLocale=en_US
CVE ID: CVE-2025-37104 State: PUBLISHED Published: 2025-07-16T14:17:49.560Z Last Updated: 2025-07-18T14:52:06.009Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Telco Service Orchestrator Description: A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated clients. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?do
nts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04875en_us&docLocale=en_US
CVE ID: CVE-2025-37105 State: PUBLISHED Published: 2025-07-16T17:42:05.208Z Last Updated: 2025-07-22T03:55:30.959Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise Products: HPE AutoPass License Server Description: An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04877en_us
CVE ID: CVE-2025-37106 State: PUBLISHED Published: 2025-07-16T17:53:03.999Z Last Updated: 2025-07-18T14:24:31.832Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Hewlett Packard Enterprise Products: HPE AutoPass License Server Description: An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04877en_us
CVE ID: CVE-2025-37107 State: PUBLISHED Published: 2025-07-16T17:55:16.614Z Last Updated: 2025-07-18T14:23:26.938Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Hewlett Packard Enterprise Products: HPE AutoPass License Server Description: An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04877en_us
CVE ID: CVE-2025-37108 State: PUBLISHED Published: 2025-07-31T19:17:55.861Z Last Updated: 2025-07-31T19:50:02.995Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Telco Service Activator Description: Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04887en_us&docLocale=en_US
CVE ID: CVE-2025-37109 State: PUBLISHED Published: 2025-07-31T19:20:44.918Z Last Updated: 2025-08-04T18:30:39.560Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Telco Service Activator Description: Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04887en_us&docLocale=en_US
CVE ID: CVE-2025-37110 State: PUBLISHED Published: 2025-07-31T19:41:39.665Z Last Updated: 2025-07-31T20:03:53.635Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise Products: HPE Telco Network Function Virtual Orchestrator Problem Types: CWE-922 Description: A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?do
ion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04891en_us
CVE ID: CVE-2025-37111 State: PUBLISHED Published: 2025-07-31T19:41:54.593Z Last Updated: 2025-07-31T20:02:46.356Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise Products: HPE Telco Network Function Virtual Orchestrator Problem Types: CWE-798 Description: A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04891en_us
CVE ID: CVE-2025-37112 State: PUBLISHED Published: 2025-07-31T19:42:04.081Z Last Updated: 2025-07-31T20:01:12.230Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise Products: HPE Telco Network Function Virtual Orchestrator Problem Types: CWE-798 Description: A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04891e
nalyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04891en_us
CVE ID: CVE-2025-37122 State: PUBLISHED Published: 2025-09-17T19:31:19.915Z Last Updated: 2025-09-17T19:42:07.283Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking ClearPass Policy Manager Description: A vulnerability in the web-based management interface of network access control services could allow an unauthenticated remote attacker to conduct a Reflected Cross-Site Scripting (XSS) attack. Successful exploitation could allow an attacker to execute arbitrary JavaScript code in a victim's browser in the context of the affected interface. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
a victim's browser in the context of the affected interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04950en_us&docLocale=en_US
CVE ID: CVE-2025-37123 State: PUBLISHED Published: 2025-09-16T22:30:31.261Z Last Updated: 2025-09-17T13:36:54.617Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking EdgeConnect SD-WAN Gateway Description: A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
ot privileges on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US
CVE ID: CVE-2025-37124 State: PUBLISHED Published: 2025-09-16T22:29:14.622Z Last Updated: 2025-09-17T13:37:35.951Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking EdgeConnect SD-WAN Gateway Description: A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leading to unauthorized access or disruption of services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/
ess or disruption of services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US
CVE ID: CVE-2025-37125 State: PUBLISHED Published: 2025-09-16T22:32:04.483Z Last Updated: 2025-09-17T13:34:28.767Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking EdgeConnect SD-WAN Gateway Description: A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS). Successful exploitation could allow an attacker to bypass firewall protections, potentially leading to unauthorized traffic being handled improperly Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US
CVE ID: CVE-2025-37126 State: PUBLISHED Published: 2025-09-16T22:19:16.146Z Last Updated: 2025-09-17T13:38:22.497Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking EdgeConnect SD-WAN Gateway Description: A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the ability to execute arbitrary commands as root on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
ary commands as root on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US
CVE ID: CVE-2025-37127 State: PUBLISHED Published: 2025-09-16T22:22:02.338Z Last Updated: 2025-09-17T13:59:02.653Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking EdgeConnect SD-WAN Gateway Description: A vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to gain shell access. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, potentially leading to unauthorized access and control over the affected systems. Additional Analyst Notes: - CISA ADP V
potentially leading to unauthorized access and control over the affected systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US
CVE ID: CVE-2025-37128 State: PUBLISHED Published: 2025-09-16T22:22:57.383Z Last Updated: 2025-09-17T14:00:38.971Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking EdgeConnect SD-WAN Gateway Description: A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/publi
table system state. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US
CVE ID: CVE-2025-37129 State: PUBLISHED Published: 2025-09-16T22:22:05.098Z Last Updated: 2025-09-17T13:59:59.039Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking EdgeConnect SD-WAN Gateway Description: A vulnerable feature in the command line interface of EdgeConnect SD-WAN could allow an authenticated attacker to exploit built-in script execution capabilities. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system if the feature is enabled without proper security measures. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
he feature is enabled without proper security measures. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US
CVE ID: CVE-2025-37130 State: PUBLISHED Published: 2025-09-16T22:20:53.184Z Last Updated: 2025-09-17T13:57:20.787Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking EdgeConnect SD-WAN Gateway Description: A vulnerability in the command-line interface of EdgeConnect SD-WAN could allow an authenticated attacker to read arbitrary files within the system. Successful exploitation could allow an attacker to read sensitive data from the underlying file system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale
- CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US
CVE ID: CVE-2025-37131 State: PUBLISHED Published: 2025-09-16T22:17:32.261Z Last Updated: 2025-09-17T13:39:02.138Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking EdgeConnect SD-WAN Gateway Description: A vulnerability in EdgeConnect SD-WAN ECOS could allow an authenticated remote threat actor with admin privileges to access sensitive unauthorized system files. Under certain conditions, this could lead to exposure and exfiltration of sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docL
tes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04943en_us&docLocale=en_US