Brand
HPE: actively exploited vulnerabilities
3 vulnerabilities in HPE products (Network Node Manager (OpenView NNM), OneView, ProCurve Manager (PCM, PCM+, IDM)) are in CISA’s catalog of exploited vulnerabilities. Last added: January 7, 2026.
-
1 vulnerability added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one HPE category to your radar, or open its page.
- Monitoring, ITSM and asset management 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Network Node Manager (OpenView NNM) 1 vulnerability · Monitoring and ITSM
- OneView 1 vulnerability · Monitoring and ITSM
- ProCurve Manager (PCM, PCM+, IDM) 1 vulnerability · Monitoring and ITSM
Names used by CISA: Hewlett Packard (HP), Hewlett Packard Enterprise (HPE). Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this HPE list.
Rank 1HPE OneView
CVE-2025-37164Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jan 7, 2026
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 2HPE Network Node Manager (OpenView NNM)
CVE-2005-2773CVE from 2005, added in 2022
HP OpenView Network Node Manager Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Rank 3HPE ProCurve Manager (PCM, PCM+, IDM)
CVE-2013-4810CVE from 2013, added in 2022
HP Multiple Products Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 25, 2022
- CISA deadline
- 21 days
- CVSS severity
- 9.8 (critical)
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.