How many CVEs does H3C have?

H3C has 232 published CVE records since 2014, including 65 in the last two years.

How many H3C CVEs are in CISA KEV?

None of H3C's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which H3C products have the most CVEs?

The H3C products with the most published CVEs are magic r100 firmware, magic r200 firmware, gr-1200w firmware, magic nx18 plus firmware, magic nx18 plus.

What are the most common weakness types in H3C CVEs?

H3C's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

Are there public exploits for H3C vulnerabilities?

Yes — 124 of H3C's CVEs have a known public exploit.

How many critical H3C vulnerabilities are there?

H3C has 83 critical and 112 high-severity CVEs.

What is the average severity of H3C CVEs?

The average CVSS base score across H3C's scored CVEs is 8.2.

RadicalNotion.AI

Log in Start free

232 CVEs

H3C Vulnerabilities

Name: H3C vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for H3C.

232

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

124

Public exploits

PoC or exploit code

8.2

Avg CVSS

2014–2026

Overview

H3C has 232 published CVE records since 2014, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 124 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting H3C products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on H3C's vulnerability posture, as a share of its 232 published CVEs.

Average CVSS: 8.2
Critical / high: 84%
Actively exploited (KEV): 0%
Public exploit available: 53%
Patch available: 8%

Severity and exploitation

How the CVSS severity of H3C's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical83

High112

Medium37

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of H3C's CVEs are currently listed in CISA's KEV catalog.

Public exploits

124

124 of H3C's CVEs have a known public exploit available.

Most affected products

The H3C products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in H3C CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish H3C CVE records.

Disclosure activity by year

How many H3C CVEs were published each year.

2014

1

2019

1

2022

100

2023

55

2024

10

2025

45

2026

20

Latest H3C CVEs

The most recently disclosed vulnerabilities affecting H3C.

H3C NX15 esps repeaterproc command injection
CWE-77
High · CVSS 8.6
EPSS 2.4%2026-08-05
H3C NX15 Web API esps service.add routine
CWE-749
High · CVSS 8.6
EPSS 0.5%2026-08-05
H3C NX15 Backend RPC esps file.exec os command injection
CWE-78
High · CVSS 8.6
EPSS 2.4%2026-08-05
H3C NX15 esps reload.reload_config command injection
CWE-77
High · CVSS 8.6
EPSS 2.7%2026-08-04
H3C NX15 esps delete command injection
CWE-77
High · CVSS 8.6
EPSS 2.3%2026-08-04
H3C NX15 esps esps.ipv6.wan command injection
CWE-77
High · CVSS 8.6
EPSS 2.3%2026-08-04
H3C NX15 esps add command injection
CWE-77
High · CVSS 8.6
EPSS 2.3%2026-08-04
H3C NX15 networkSetup missing authentication
CWE-306
Medium · CVSS 6.9
EPSS 0.4%2026-08-04
Critical vulnerability · 2026-08-04
CWE-77
Critical · CVSS 9.8
EPSS 2.2%2026-08-04
H3C SecPath F1000-C8300 g=log_fw_nbc_mail_jsondata sql injection
CWE-89
Medium · CVSS 6.9
EPSS 0.4%2026-07-15
H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery
CWE-640
Medium · CVSS 6.9
EPSS 0.5%2026-07-12
H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflow
CWE-119
High · CVSS 8.7
EPSS 0.5%2026-06-01

Track new H3C CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor H3C CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

golang237 CVEs TIBCO237 CVEs Hitachi236 CVEs OpenEMR234 CVEs Linksys233 CVEs PostgreSQL232 CVEs HashiCorp228 CVEs amazon227 CVEs

Browse all vendors

Frequently asked questions

Common questions about H3C vulnerabilities.

How many CVEs does H3C have?: H3C has 232 published CVE records since 2014, including 65 in the last two years.
How many H3C CVEs are in CISA KEV?: None of H3C's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which H3C products have the most CVEs?: The H3C products with the most published CVEs are magic r100 firmware, magic r200 firmware, gr-1200w firmware, magic nx18 plus firmware, magic nx18 plus.
What are the most common weakness types in H3C CVEs?: H3C's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
Are there public exploits for H3C vulnerabilities?: Yes — 124 of H3C's CVEs have a known public exploit.
How many critical H3C vulnerabilities are there?: H3C has 83 critical and 112 high-severity CVEs.
What is the average severity of H3C CVEs?: The average CVSS base score across H3C's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track H3C vulnerabilities

Monitor new H3C vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing