Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in Start free

Home
Vendors
Hewlett Packard Enterprise
Aos Cx

Hewlett Packard Enterprise AOS-CX Vulnerabilities: CVEs, CISA KEV & Security Advisories

Hewlett Packard Enterprise

46 CVEs

HE

Hewlett Packard Enterprise AOS-CX Vulnerabilities

CVE security advisories and vulnerability history for AOS-CX by Hewlett Packard Enterprise.

46

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.2

Avg CVSS

2025–2026

Last updated September 1, 2026

Overview

Hewlett Packard Enterprise AOS-CX has 46 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Hewlett Packard Enterprise AOS-CX, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Hewlett Packard Enterprise AOS-CX's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High28

Medium14

Low2

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Hewlett Packard Enterprise AOS-CX's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Hewlett Packard Enterprise AOS-CX CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Hewlett Packard Enterprise AOS-CX version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

10.13.0000 <= v <= 10.13.118035 CVEs
10.10.0000 <= v <= 10.10.118034 CVEs
10.16.0000 <= v <= 10.16.105134 CVEs
10.17.0000 <= v <= 10.17.102134 CVEs
10.18.0000 <= v <= 10.18.000134 CVEs
10.10.0000 <= v <= 10.10.11705 CVEs
10.16.0000 <= v <= 10.16.10205 CVEs
10.17.0000 <= v <= 10.17.00015 CVEs
10.13.0000 <= v <= 10.13.11014 CVEs
10.15.0000 <= v <= 10.15.10003 CVEs
10.16.0000 <= v <= 10.16.10503 CVEs
10.17.0000 <= v <= 10.17.10203 CVEs
10.18.0000 <= v < 10.18.00013 CVEs
10.10.0000 <= v <= 10.10.11402 CVEs
10.13.0000 <= v <= 10.13.10702 CVEs
10.13.0000 <= v <= 10.13.11702 CVEs
10.14.0000 <= v <= 10.14.10302 CVEs
10.13.0000 <= v <= 10.13.11601 CVE
10.14.0000 <= v <= 10.14.10401 CVE

Fixed in

> 10.13.118035 CVEs
> 10.10.118034 CVEs
> 10.16.105134 CVEs
> 10.17.102134 CVEs
> 10.18.000134 CVEs
> 10.10.11705 CVEs
> 10.16.10205 CVEs
> 10.17.00015 CVEs
> 10.13.11014 CVEs
> <=10.10.11403 CVEs
> <=10.15.10003 CVEs
> 10.16.10503 CVEs
> 10.17.10203 CVEs

Find a version

46 CVEs

Sort

Authenticated Stack Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
CVE-2026-73783
Patch
Medium · CVSS 4.9
2026-09-01
Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
CVE-2026-73782
Patch
High · CVSS 8.8
2026-09-01
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface
CVE-2026-73781
Patch
High · CVSS 8.4
2026-09-01
Lack of Cross-Site Request Forgery (CSRF) Protections for Certificate-Authenticated Sessions in AOS-CX
CVE-2026-73780
Patch
High · CVSS 8.3
2026-09-01
Authentication Bypass Vulnerabilities Leading to Information Disclosure, Unauthorized Modification, and Service Disruption in AOS-CX
CVE-2026-73779
Patch
High · CVSS 8.2
2026-09-01
Credential Manager Vulnerability Allows Unauthorized Administrative Access
CVE-2026-73778
Patch
High · CVSS 8.1
2026-09-01
Authorization Bypass Vulnerabilities Leading to Privilege Escalation in AOS-CX API Endpoint
CVE-2026-73777
Patch
High · CVSS 8.1
2026-09-01
Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
CVE-2026-73776
Patch
High · CVSS 7.9
2026-09-01
Authenticated Sensitive Information Disclosure Vulnerabilities in AOS-CX
CVE-2026-73775
Patch
High · CVSS 7.7
2026-09-01
Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX
CVE-2026-73774
Patch
High · CVSS 7.6
2026-09-01
Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX
CVE-2026-73773
Patch
High · CVSS 7.5
2026-09-01
Unauthenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-CX
CVE-2026-73772
Patch
Medium · CVSS 6.5
2026-09-01
Improper Authentication Handling in AOS-CX Management Interface and API
CVE-2026-73771
Patch
High · CVSS 7.5
2026-09-01
Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX
CVE-2026-73770
Patch
High · CVSS 7.3
2026-09-01
Local Privilege Escalation in AOS-CX Command Line Interface
CVE-2026-73768
Patch
High · CVSS 7.3
2026-09-01
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
CVE-2026-73767
Patch
High · CVSS 7.2
2026-09-01
Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX
CVE-2026-73766
Patch
High · CVSS 7.2
2026-09-01
Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX
CVE-2026-73765
Patch
High · CVSS 7.2
2026-09-01
Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX
CVE-2026-73764
Patch
High · CVSS 7.1
2026-09-01
Unauthenticated Remote Command Execution in Management Component
CVE-2026-73763
Patch
High · CVSS 7.1
2026-09-01
Authorization Bypass in the API Endpoint of AOS-CX Leads to Unauthorized Access
CVE-2026-73762
Patch
Medium · CVSS 6.6
2026-09-01
Unauthenticated Out-of-Bounds Read Vulnerability leads to Information Disclosure in AOS-CX
CVE-2026-73761
Patch
Medium · CVSS 6.5
2026-09-01
Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX
CVE-2026-73760
Patch
Medium · CVSS 6.5
2026-09-01
Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX
CVE-2026-73759
Patch
Medium · CVSS 6.5
2026-09-01
Authenticated Privilege Escalation Vulnerability via Broken Access Control in AOS-CX
CVE-2026-73758
Patch
Medium · CVSS 6.5
2026-09-01
Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure in AOS-CX
CVE-2026-73757
Patch
Medium · CVSS 6.4
2026-09-01
Unauthenticated Sensitive Information Disclosure via Man-in-the-Middle in AOS-CX via API Endpoint
CVE-2026-73756
Patch
Medium · CVSS 5.9
2026-09-01
Privilege Escalation via Unauthorized Access to Sensitive Session Information
CVE-2026-73755
Patch
Medium · CVSS 5.7
2026-09-01
Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX
CVE-2026-73754
Patch
Medium · CVSS 5.3
2026-09-01
Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
CVE-2026-73753
Patch
High · CVSS 8.8
2026-09-01

Showing 30 of 46

Common weakness types

The CWE weakness categories most often found in Hewlett Packard Enterprise AOS-CX CVEs. Follow any weakness for its full explanation.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-359Exposure of Private Personal Information to an Unauthorized Actor2 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVE
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE
CWE-287Improper Authentication1 CVE
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVE

Disclosure activity by year

How many Hewlett Packard Enterprise AOS-CX CVEs were published each year.

2025

4

2026

42

Other Hewlett Packard Enterprise products

Browse vulnerabilities for other products by Hewlett Packard Enterprise.

Intelligent Management Center (iMC) PLAT95 CVEs Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central67 CVEs Fabric Composer52 CVEs Aruba ClearPass Policy Manager44 CVEs ArubaOS (AOS)34 CVEs EdgeConnect SD-WAN Orchestrator27 CVEs HPE Aruba Networking Wireless Operating System (AOS)27 CVEs Aruba EdgeConnect Enterprise Software23 CVEs

All Hewlett Packard Enterprise vulnerabilities

Frequently asked questions

Common questions about Hewlett Packard Enterprise AOS-CX vulnerabilities.

How many CVEs does Hewlett Packard Enterprise AOS-CX have?: Hewlett Packard Enterprise AOS-CX has 46 published CVE records since 2025.
How many Hewlett Packard Enterprise AOS-CX CVEs are in CISA KEV?: None of Hewlett Packard Enterprise AOS-CX's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Hewlett Packard Enterprise AOS-CX vulnerabilities?: No Hewlett Packard Enterprise AOS-CX CVEs currently have a tracked public exploit in this dataset.
Which versions of Hewlett Packard Enterprise AOS-CX are affected?: 41 distinct Hewlett Packard Enterprise AOS-CX versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Hewlett Packard Enterprise AOS-CX CVEs?: Hewlett Packard Enterprise AOS-CX's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-359 (Exposure of Private Personal Information to an Unauthorized Actor), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-863 (Incorrect Authorization).
How many critical Hewlett Packard Enterprise AOS-CX vulnerabilities are there?: Hewlett Packard Enterprise AOS-CX has 2 critical and 28 high-severity CVEs.
What is the average severity of Hewlett Packard Enterprise AOS-CX CVEs?: The average CVSS base score across Hewlett Packard Enterprise AOS-CX's scored CVEs is 7.2.

References

All Hewlett Packard Enterprise vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Hewlett Packard Enterprise AOS-CX vulnerabilities

Monitor new Hewlett Packard Enterprise AOS-CX vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References

10.18.0001

3 CVEs

> <=10.13.10702 CVEs

> <=10.14.10302 CVEs

> 10.13.11702 CVEs

> <=10.13.10601 CVE

> <=10.14.10201 CVE

> <=10.14.10401 CVE

> <=10.15.00051 CVE

> 10.13.11601 CVE