Skip to content
English

Products › Brands

Brand

HPE: actively exploited vulnerabilities

3 vulnerabilities in HPE products (Network Node Manager (OpenView NNM), OneView, ProCurve Manager (PCM, PCM+, IDM)) are in CISA’s catalog of exploited vulnerabilities. Last added: January 7, 2026.

By category

Add just one HPE category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Network Node Manager (OpenView NNM) 1 vulnerability · Monitoring and ITSM
  • OneView 1 vulnerability · Monitoring and ITSM
  • ProCurve Manager (PCM, PCM+, IDM) 1 vulnerability · Monitoring and ITSM

Names used by CISA: Hewlett Packard (HP), Hewlett Packard Enterprise (HPE). Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this HPE list.

  1. Rank 1HPE OneView

    CVE-2025-37164

    Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jan 7, 2026
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)
  2. Rank 2HPE Network Node Manager (OpenView NNM)

    CVE-2005-2773

    CVE from 2005, added in 2022

    HP OpenView Network Node Manager Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)
  3. Rank 3HPE ProCurve Manager (PCM, PCM+, IDM)

    CVE-2013-4810

    CVE from 2013, added in 2022

    HP Multiple Products Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.