Brand
HPE: actively exploited vulnerabilities
3 vulnerabilities in HPE products (Network Node Manager (OpenView NNM), OneView, ProCurve Manager (PCM, PCM+, IDM)) are in CISA’s catalog of exploited vulnerabilities. Last added: January 7, 2026.
-
1 vulnerability added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one HPE category to your radar, or open its page.
- Monitoring, ITSM and asset management 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single HPE product (Network Node Manager (OpenView NNM), OneView…) rather than the whole brand.
- Network Node Manager (OpenView NNM)1 vulnerability, Monitoring and ITSM
- OneView1 vulnerability, Monitoring and ITSM
- ProCurve Manager (PCM, PCM+, IDM)1 vulnerability, Monitoring and ITSM
Names used by CISA: Hewlett Packard (HP), Hewlett Packard Enterprise (HPE). Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this HPE list.
- Rank 1
HPE OneViewCVE-2025-37164
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
CVSS severity 9.8critical
Added Jan 7, 2026
- Rank 2
HPE Network Node Manager (OpenView NNM)CVE-2005-2773
HP OpenView Network Node Manager Remote Code Execution Vulnerability
CVE from 2005, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
- Rank 3
HPE ProCurve Manager (PCM, PCM+, IDM)CVE-2013-4810
HP Multiple Products Remote Code Execution Vulnerability
CVE from 2013, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.