Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-27044 State: PUBLISHED Published: 2025-07-08T12:49:08.008Z Last Updated: 2025-07-08T13:41:48.109Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-787 Description: Memory corruption while executing timestamp video decode command with large input values. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE ID: CVE-2025-27045 State: PUBLISHED Published: 2025-10-09T03:17:56.821Z Last Updated: 2025-10-09T14:08:14.929Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while processing batch command execution in Video driver. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-27046 State: PUBLISHED Published: 2025-07-08T12:49:09.292Z Last Updated: 2025-07-08T13:21:10.300Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-415 Description: Memory corruption while processing multiple simultaneous escape calls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE ID: CVE-2025-27047 State: PUBLISHED Published: 2025-07-08T12:49:10.628Z Last Updated: 2025-07-08T13:17:41.608Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while processing the TESTPATTERNCONFIG escape path. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE ID: CVE-2025-27048 State: PUBLISHED Published: 2025-10-09T03:17:58.058Z Last Updated: 2025-10-10T03:55:18.202Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-822 Description: Memory corruption while processing camera platform driver IOCTL calls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-27049 State: PUBLISHED Published: 2025-10-09T03:17:59.292Z Last Updated: 2025-10-09T19:11:14.315Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while processing IOCTL call for image encoding. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-27050 State: PUBLISHED Published: 2025-07-08T12:49:11.960Z Last Updated: 2025-07-08T13:17:23.012Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while processing event close when client process terminates abruptly. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE ID: CVE-2025-27051 State: PUBLISHED Published: 2025-07-08T12:49:13.329Z Last Updated: 2025-07-08T13:17:07.482Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-415 Description: Memory corruption while processing command message in WLAN Host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE ID: CVE-2025-27052 State: PUBLISHED Published: 2025-07-08T12:49:14.697Z Last Updated: 2025-07-08T13:16:51.373Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while processing data packets in diag received from Unix clients. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE ID: CVE-2025-27053 State: PUBLISHED Published: 2025-10-09T03:18:00.779Z Last Updated: 2025-10-10T03:55:17.274Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-131 Description: Memory corruption during PlayReady APP usecase while processing TA commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-27054 State: PUBLISHED Published: 2025-10-09T03:18:03.164Z Last Updated: 2025-10-10T03:55:16.476Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-787 Description: Memory corruption while processing a malformed license file during reboot. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-27055 State: PUBLISHED Published: 2025-07-08T12:49:16.031Z Last Updated: 2025-07-08T13:16:28.961Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory corruption during the image encoding process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE ID: CVE-2025-27056 State: PUBLISHED Published: 2025-07-08T12:49:17.331Z Last Updated: 2025-07-08T13:16:12.001Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption during sub-system restart while processing clean-up to free up resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE ID: CVE-2025-27057 State: PUBLISHED Published: 2025-07-08T12:49:18.686Z Last Updated: 2025-07-08T13:15:58.087Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while handling beacon frames with invalid IE header length. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE ID: CVE-2025-27058 State: PUBLISHED Published: 2025-07-08T12:49:20.188Z Last Updated: 2025-07-08T13:15:42.427Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while processing packet data with exceedingly large packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE ID: CVE-2025-27059 State: PUBLISHED Published: 2025-10-09T03:18:04.840Z Last Updated: 2025-10-10T03:55:15.655Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption while performing SCM call. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-27060 State: PUBLISHED Published: 2025-10-09T03:18:06.050Z Last Updated: 2025-10-10T03:55:14.781Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-822 Description: Memory corruption while performing SCM call with malformed inputs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-27061 State: PUBLISHED Published: 2025-07-08T12:49:21.840Z Last Updated: 2025-07-08T13:15:25.173Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-787 Description: Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2025-bulletin.html
CVE ID: CVE-2025-27062 State: PUBLISHED Published: 2025-08-06T07:26:00.568Z Last Updated: 2025-08-06T15:37:22.461Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-284 Description: Memory corruption while handling client exceptions, allowing unauthorized channel access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-27064 State: PUBLISHED Published: 2025-11-04T03:19:10.792Z Last Updated: 2025-11-04T19:39:01.419Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while registering commands from clients with diag through diagHal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-27065 State: PUBLISHED Published: 2025-08-06T07:26:01.770Z Last Updated: 2025-08-06T15:37:02.799Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while processing a frame with malformed shared-key descriptor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-27066 State: PUBLISHED Published: 2025-08-06T07:26:03.160Z Last Updated: 2025-08-06T13:36:36.865Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-617 Description: Transient DOS while processing an ANQP message. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-27067 State: PUBLISHED Published: 2025-08-06T07:26:04.469Z Last Updated: 2025-08-06T13:36:14.326Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption while processing DDI call with invalid buffer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-27068 State: PUBLISHED Published: 2025-08-06T07:26:05.479Z Last Updated: 2025-08-06T13:35:56.449Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory corruption while processing an IOCTL command with an arbitrary address. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-27069 State: PUBLISHED Published: 2025-08-06T07:26:06.448Z Last Updated: 2025-08-06T13:35:31.020Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-822 Description: Memory corruption while processing DDI command calls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-27070 State: PUBLISHED Published: 2025-11-04T03:19:12.122Z Last Updated: 2025-11-04T14:46:30.167Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-787 Description: Memory corruption while performing encryption and decryption commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-27071 State: PUBLISHED Published: 2025-08-06T07:26:07.500Z Last Updated: 2025-08-06T13:35:05.577Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while processing specific files in Powerline Communication Firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-27072 State: PUBLISHED Published: 2025-08-06T07:26:08.625Z Last Updated: 2025-08-06T13:34:16.946Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Information disclosure while processing a packet at EAVB BE side with invalid header length. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-27073 State: PUBLISHED Published: 2025-08-06T07:26:09.724Z Last Updated: 2025-08-06T13:33:47.104Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-617 Description: Transient DOS while creating NDP instance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-27074 State: PUBLISHED Published: 2025-11-04T03:19:13.447Z Last Updated: 2025-11-04T14:46:19.115Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-131 Description: Memory corruption while processing a GP command response. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-27075 State: PUBLISHED Published: 2025-08-06T07:26:10.779Z Last Updated: 2025-08-06T13:33:00.515Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-27076 State: PUBLISHED Published: 2025-08-06T07:26:11.825Z Last Updated: 2025-08-06T13:28:58.671Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-367 Description: Memory corruption while processing simultaneous requests via escape path. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-27077 State: PUBLISHED Published: 2025-09-24T15:33:44.799Z Last Updated: 2025-09-25T03:55:38.275Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while processing message in guest VM. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE ID: CVE-2025-27078 State: PUBLISHED Published: 2025-04-08T15:57:02.519Z Last Updated: 2025-04-09T04:00:46.758Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: AOS-10 AP Description: A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating system while using the CLI. Successful exploitation could lead to complete system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04844en_us&docLocale=en_US
CVE ID: CVE-2025-27079 State: PUBLISHED Published: 2025-04-08T15:57:33.673Z Last Updated: 2025-04-09T04:00:48.360Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: AOS-10 AP Description: A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution (RCE). Successful exploitation could allow an attacker to execute arbitrary operating system commands on the underlying operating system leading to potential system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://suppo
m leading to potential system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04844en_us&docLocale=en_US
CVE ID: CVE-2025-27080 State: PUBLISHED Published: 2025-03-18T19:02:30.151Z Last Updated: 2025-03-18T19:32:15.822Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: AOS-CX Description: Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized access to services outside of the impacted switch, potentially leading to lateral movement involving those services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpe
CVE ID: CVE-2025-27081 State: PUBLISHED Published: 2025-04-10T08:43:48.473Z Last Updated: 2025-04-10T15:18:17.102Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Hewlett Packard Enterprise Products: HPE NonStop OSM Service Connection Suite Problem Types: CWE-400 Description: A potential security vulnerability in HPE NonStop OSM Service Connection Suite could potentially be exploited to allow a local Denial of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns04836en_us&docLocale=en_US
CVE ID: CVE-2025-27082 State: PUBLISHED Published: 2025-04-08T16:22:50.625Z Last Updated: 2025-04-09T04:00:50.324Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking AOS Description: Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an Authenticated attacker to upload arbitrary files and execute arbitrary commands on the underlying host operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/
operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04845en_us&docLocale=en_US
CVE ID: CVE-2025-27083 State: PUBLISHED Published: 2025-04-08T16:26:50.920Z Last Updated: 2025-04-09T17:44:13.731Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking AOS Description: Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Successful exploitation of these vulnerabilities allows an Authenticated attacker to execute arbitrary commands as a privileged user on the underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay
system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04845en_us&docLocale=en_US
CVE ID: CVE-2025-27084 State: PUBLISHED Published: 2025-04-08T16:32:46.764Z Last Updated: 2025-04-09T17:44:59.609Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking AOS Description: A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the context of the affected interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.co
ntext of the affected interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04845en_us&docLocale=en_US
CVE ID: CVE-2025-27085 State: PUBLISHED Published: 2025-04-08T16:29:25.829Z Last Updated: 2025-04-09T17:45:48.190Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Aruba Networking AOS Description: Multiple vulnerabilities exist in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04845en
alyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04845en_us&docLocale=en_US
CVE ID: CVE-2025-27086 State: PUBLISHED Published: 2025-04-21T18:07:11.498Z Last Updated: 2025-04-22T13:18:03.464Z Vendors: Hewlett Packard Enterprise Products: HPE Performance Cluster Manager (HPCM) Description: A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04842en_us&docLocale=en_US
CVE ID: CVE-2025-27087 State: PUBLISHED Published: 2025-04-22T21:38:20.893Z Last Updated: 2025-04-23T13:11:50.859Z Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Cray Operating System (COS) Description: A vulnerability in the kernel of the Cray Operating System (COS) could allow an attacker to perform a local Denial of Service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04838en_us&docLocale=en_US