How many CVEs does HP have?

HP has 2,526 published CVE records since 1999, including 44 in the last two years.

How many HP CVEs are in CISA KEV?

Yes — 6 of HP's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which HP products have the most CVEs?

The HP products with the most published CVEs are hp-ux, intelligent management center, openview network node manager, system management homepage, instantos.

What are the most common weakness types in HP CVEs?

HP's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition).

Are there public exploits for HP vulnerabilities?

Yes — 281 of HP's CVEs have a known public exploit.

How many critical HP vulnerabilities are there?

HP has 595 critical and 916 high-severity CVEs.

What is the average severity of HP CVEs?

The average CVSS base score across HP's scored CVEs is 7.2.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

2,526 CVEs

6 in CISA KEV

HP Vulnerabilities

Name: HP vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for HP.

2,526

Total CVEs

Published

6

In CISA KEV

Exploited in the wild

281

Public exploits

PoC or exploit code

7.2

Avg CVSS

1999–2026

Overview

HP has 2,526 published CVE records since 1999, of which 6 are in CISA's Known Exploited Vulnerabilities catalog and 281 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting HP products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on HP's vulnerability posture, as a share of its 2,526 published CVEs.

Average CVSS: 7.2
Critical / high: 60%
Actively exploited (KEV): 0%
Public exploit available: 11%
Patch available: 33%

Severity and exploitation

How the CVSS severity of HP's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical595

High916

Medium909

Low106

In CISA’s Known Exploited Vulnerabilities catalog

6

6 of HP's CVEs are confirmed exploited in the wild.

Public exploits

281

281 of HP's CVEs have a known public exploit available.

Most affected products

The HP products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in HP CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish HP CVE records.

Disclosure activity by year

How many HP CVEs were published each year.

2019

191

2020

128

2021

60

2022

82

2023

148

2024

74

2025

38

2026

6

Latest HP CVEs

The most recently disclosed vulnerabilities affecting HP.

HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution
CWE-77
High · CVSS 8.5
EPSS 0.9%2026-05-20
HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution
CWE-122
Critical · CVSS 9.3
EPSS 1.3%2026-05-20
Samsung Print Service Plugin – Potential Information Disclosure
CWE-926
Medium · CVSS 6.9
EPSS 0.1%2026-05-06
HP System Event Utility – Denial of Service
CWE-276
Medium · CVSS 5.2
EPSS 0.1%2026-03-03
Certain HP OfficeJet Pro Printers - Information Disclosure
CWE-346
Medium · CVSS 6.9
EPSS 0.2%2026-02-10
Certain HP OfficeJet Pro Printers – Denial of Service
CWE-703
Medium · CVSS 6.9
EPSS 0.3%2026-02-10
Poly Video - Sensitive Data Might Be Written to Log File
CWE-532
High · CVSS 8.1
EPSS 0.4%2025-12-16
HP System Event Utility and Omen Gaming Hub – Potential Arbitrary Code Execution
CWE-22
Medium · CVSS 4.8
EPSS 0.3%2025-12-09
HP Image Assistant - Potential Escalation of Privilege
CWE-363
Medium · CVSS 5.4
EPSS 0.1%2025-12-03
Certain HP LaserJet Pro Printers – Potential Information Disclosure
CWE-200
Medium · CVSS 6.9
EPSS 0.3%2025-11-13
Certain HP LaserJet Pro Printers – Potential Information Disclosure
CWE-200
Medium · CVSS 6.9
EPSS 0.3%2025-11-13
HP Client Management Script Library – Security Update
CWE-427
High · CVSS 8.5
EPSS 0.2%2025-11-03

Track new HP CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor HP CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Apache Software Foundation3,182 CVEs Qualcomm3,033 CVEs Netapp2,519 CVEs Huawei2,383 CVEs Tenda2,048 CVEs Sourcecodester2,036 CVEs Intel2,001 CVEs SAP1,898 CVEs

Browse all vendors

Frequently asked questions

Common questions about HP vulnerabilities.

How many CVEs does HP have?: HP has 2,526 published CVE records since 1999, including 44 in the last two years.
How many HP CVEs are in CISA KEV?: Yes — 6 of HP's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which HP products have the most CVEs?: The HP products with the most published CVEs are hp-ux, intelligent management center, openview network node manager, system management homepage, instantos.
What are the most common weakness types in HP CVEs?: HP's CVEs most often map to these CWE weakness types: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management), CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition).
Are there public exploits for HP vulnerabilities?: Yes — 281 of HP's CVEs have a known public exploit.
How many critical HP vulnerabilities are there?: HP has 595 critical and 916 high-severity CVEs.
What is the average severity of HP CVEs?: The average CVSS base score across HP's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track HP vulnerabilities

Monitor new HP vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing