Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
35 results
Sep 29, 2026A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect.CVE-2026-76720 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 4.3
A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect.
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 29, 2026A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions.CVE-2026-76719 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 8.2
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions.
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 29, 2026A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions.CVE-2026-76718 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 8.2
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions.
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 26, 2025A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC).CVE-2025-37101 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 8.7
A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC). This vulnerability could be exploited allowing an attacker with read only privilege to cause Vertical Privilege Escalation (operator can perform admin actions).
- Product
- HPE OneView for VMware vCenter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 18, 2024This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users.CVE-2024-42508 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comMedium 5.5
This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users.
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 23, 2024HPE OneView may have a missing passphrase during restore.CVE-2023-6573 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 5.5
HPE OneView may have a missing passphrase during restore.
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Jan 23, 2024HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.CVE-2023-50275 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.5
HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Jan 23, 2024HPE OneView may allow command injection with local privilege escalation.CVE-2023-50274 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comHigh 7.8
HPE OneView may allow command injection with local privilege escalation.
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Oct 25, 2023 A remote code execution issue exists in HPE OneView.CVE-2023-30912 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comHigh 7.2
A remote code execution issue exists in HPE OneView.
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Sep 14, 2023A remote authentication bypass issue exists in some OneView APIs.CVE-2023-30909 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comCritical 9.8
A remote authentication bypass issue exists in some OneView APIs.
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Sep 7, 2023A remote authentication bypass issue exists in a OneView API.CVE-2023-30908 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comCritical 9.8
A remote authentication bypass issue exists in a OneView API.
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 25, 2023HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokensCVE-2023-28084 · Other software · Hewlett Packard Enterprise · reported by security-alert@hpe.comMedium 5.5
HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 25, 2023An HPE OneView appliance dump may expose SNMPv3 read credentialsCVE-2023-28090 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comMedium 5.5
An HPE OneView appliance dump may expose SNMPv3 read credentials
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 25, 2023An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect ModulesCVE-2023-28089 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comHigh 7.1
An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 25, 2023An HPE OneView appliance dump may expose SAN switch administrative credentialsCVE-2023-28088 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comHigh 7.8
An HPE OneView appliance dump may expose SAN switch administrative credentials
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 25, 2023An HPE OneView appliance dump may expose OneView user accountsCVE-2023-28087 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comMedium 5.5
An HPE OneView appliance dump may expose OneView user accounts
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 25, 2023An HPE OneView appliance dump may expose proxy credential settingsCVE-2023-28086 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comMedium 5.5
An HPE OneView appliance dump may expose proxy credential settings
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 14, 2023HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dumpCVE-2023-28091 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comMedium 5.5
HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump
- Product
- HPE OneView
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 14, 2023An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentialsCVE-2023-28085 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comMedium 5.5
An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials
- Product
- HPE OneView Global Dashboard
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Mar 1, 2023HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.CVE-2022-37935 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comMedium 5.5
HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.
- Product
- HPE OneView for VMware vCenter,
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Dec 12, 2022URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashboard (OVGD).CVE-2022-37927 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comMedium 6.1
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashboard (OVGD).
- Product
- HPE OneView Global Dashboard (OVGD)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Aug 31, 2022A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01.CVE-2022-28625 · Other software · HP · reported by security-alert@hpe.comMedium 5.5
A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s): Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability. To exploit this vulnerability, HPE OneView must be configured with credential access to external repositories. HPE has provided a software update to resolve this vulnerability in HPE OneView.
- Product
- Oneview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
May 17, 2022A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0.CVE-2022-28616 · Other software · HP · reported by security-alert@hpe.comCritical 9.8
A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
- Product
- Oneview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
May 17, 2022A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0.CVE-2022-28617 · Other software · HP · reported by security-alert@hpe.comCritical 9.8
A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
- Product
- Oneview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
May 17, 2022A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0.CVE-2022-23706 · Other software · HP · reported by security-alert@hpe.comMedium 6.1
A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.
- Product
- Oneview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 4, 2022A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6.CVE-2022-23700 · Other software · HP · reported by security-alert@hpe.comMedium 5.5
A local unauthorized read access to files vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
- Product
- Oneview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 4, 2022A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6.CVE-2022-23699 · Other software · HP · reported by security-alert@hpe.comHigh 7.8
A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
- Product
- Oneview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 4, 2022A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6.CVE-2022-23698 · Other software · HP · reported by security-alert@hpe.comHigh 7.5
A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
- Product
- Oneview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Apr 4, 2022A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6.CVE-2022-23697 · Other software · HP · reported by security-alert@hpe.comMedium 6.1
A remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.
- Product
- Oneview
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Feb 24, 2022A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5.CVE-2021-29217 · Other software · HPE · reported by security-alert@hpe.comMedium 6.1
A remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global Dashboard.
- Product
- Oneview Global Dashboard
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Feb 24, 2022A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5.CVE-2021-29216 · Other software · HPE · reported by security-alert@hpe.comMedium 6.1
A remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard version(s): Prior to 2.5. HPE has provided a software update to resolve this vulnerability in HPE OneView Global Dashboard.
- Product
- Oneview Global Dashboard
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Jun 24, 2021A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged information.CVE-2021-26585 · Other software · HPE · reported by security-alert@hpe.comMedium 5.5
A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged information. HPE has provided an update to OneView Global Dashboard. The issue is resolved in 2.32.
- Product
- Oneview Global Dashboard
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Jun 3, 2021A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting.CVE-2021-26584 · Other software · HP · reported by security-alert@hpe.comMedium 6.1
A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerability in HPE OneView for VMware vCenter (OV4VC).
- Product
- Oneview For VMware Vcenter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Mar 4, 2020HPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability.CVE-2020-7130 · Other software · HP · reported by security-alert@hpe.comHigh 7.5
HPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability. HPE OneView Global Dashboard - After Upgrade or Install of OVGD Version 1.9, Appliance Firewall May Leave Ports Open. This is resolved in OVGD 1.91 or later.
- Product
- Oneview Global Dashboard
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Dec 18, 2019A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting.CVE-2019-11992 · Other software · HP · reported by security-alert@hpe.comMedium 6.1
A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting.
- Product
- Oneview For VMware Vcenter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.hpe.comsupport.hpe.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.