HPE Fabric OS

productDE

cpe:/o:hpe:fabric_os:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical8high9medium2low

updated 2026-10-23

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-40438US	critical9.0OT critical	100.0% (100th)	KEV	no fix	2021-09-16	—
CVE-2019-11477US	high7.5	98.7% (100th)	Exploit	no fix	2019-06-19	—
CVE-2017-16997US	high7.8	2.90% (87th)	Exploit	no fix	2017-12-18	—
CVE-2017-1000408US	high7.8	1.45% (73rd)	Exploit	no fix	2018-02-01	—
CVE-2017-1000409US	high7.0	1.21% (68th)	Exploit	no fix	2018-02-01	—
CVE-2019-11478US	high7.5	94.7% (100th)	—	no fix	2019-06-19	—
CVE-2019-11479US	high7.5	91.7% (100th)	—	no fix	2019-06-19	—
CVE-2021-36160US	high7.5	62.9% (99th)	—	no fix	2021-09-16	—
CVE-2018-0732US	high7.5	48.1% (99th)	—	no fix	2018-06-12	—
CVE-2014-9984US	critical9.8	4.48% (91st)	—	no fix	2017-06-12	—
CVE-2021-23839US	low3.7OT elevated	2.96% (87th)	—	no fix	2021-02-16	—
CVE-2022-33186US	critical9.8	1.66% (77th)	—	no fix	2022-12-08	—
CVE-2021-20325US	critical9.8	1.59% (76th)	—	no fix	2022-02-18	—
CVE-2023-0394US	medium5.5OT elevated	1.02% (63rd)	—	no fix	2023-01-26	—
CVE-2024-26924US	—	0.85% (58th)	—	no fix	2024-04-25	—
CVE-2024-26926US	medium5.5	0.44% (38th)	—	no fix	2024-04-25	—
CVE-2021-29647US	medium5.5	0.37% (29th)	—	no fix	2021-03-30	—
CVE-2025-4663US	medium4.9	0.35% (28th)	—	no fix	2025-07-08	—
CVE-2021-29646US	medium5.5	0.31% (23rd)	—	no fix	2021-03-30	—
CVE-2021-29649US	medium5.5	0.30% (22nd)	—	no fix	2021-03-30	—
CVE-2021-29648US	medium5.5	0.28% (20th)	—	no fix	2021-03-30	—
CVE-2024-26925US	medium5.5	0.27% (18th)	—	no fix	2024-04-25	—
CVE-2024-26923US	medium4.7	0.21% (10th)	—	no fix	2024-04-25	—
CVE-2025-4661US	low2.3	0.21% (10th)	—	no fix	2025-06-19	—

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-125Out-of-bounds Read1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.