Hewlett Packard Enterprise HPE Aos-Cx vulnerabilities

2 CVEs affecting Hewlett Packard Enterprise HPE Aos-Cx, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-27080, published 2025-03-18.

More from Hewlett Packard Enterprise HPE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-25042, published 2025-03-18. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read…
• CVE-2025-27080, published 2025-03-18. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain…