HPE Autopass License Server vulnerabilities
8 CVEs affecting HPE Autopass License Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-23600, published 2026-03-02.
More from HPE.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2024-51767, published 2025-07-14. High severity, CVSS 7.3. EPSS: 1.4% chance of exploitation in the next 30 days. An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17.
- CVE-2026-23600, published 2026-03-02. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).
- CVE-2025-37105, published 2025-07-16. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.
- CVE-2025-37106, published 2025-07-16. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.
- CVE-2025-37107, published 2025-07-16. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.
- CVE-2024-51768, published 2025-07-14. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17.
- CVE-2024-51770, published 2025-07-14. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17.
- CVE-2024-51769, published 2025-07-14. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17.