HP News Articles
Recent news articles refferecing the vendors vulnerabilities.

Hewlett Packard Enterprise Directory Traversal Remote Code Execution Vulnerability (CVE-2025-37099)
- This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability.

Hewlett Packard Enterprise Directory Traversal Remote Code Execution Vulnerability (CVE-2025-37099)
- This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability.

CVE-2025-37099 HPE Insight Remote Support processAttachmentDataStream path traversal
A vulnerability was found in HPE Insight Remote Support. It has been classified as very critical. This vulnerability is uniquely identified as CVE-2025-37099. It is recommended to upgrade the affected component.

HPE Security Patches CVE-2024-42509 In Aruba Access Points
HPE releases critical patches for CVE-2024-42509, addressing remote code execution risks in Aruba Access Points.
HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities
HPE addresses critical flaws in Aruba Access Points, preventing remote code execution for secure networking
Multiple Flaws in ArubaOS Switches Let Attackers Execute Remote Code
Multiple vulnerabilities have been identified in ArubaOS-Switch Switches, specifically pertaining to Stored Cross-site Scripting (Stored XSS), Denial of Service (DoS), and Memory corruption. Aruba has taken measures to mitigate these vulnerabilities and has subsequently published a security advisory...