Loading story…
HP disclosed that Network Node Manager i (NNMi) 9.0x deployments on HP-UX, Linux, Solaris, and Windows were affected by numerous vulnerabilities in the bundled or supported Java Development Kit. Remote attackers could exploit the flaws to disclose or modify information and cause denial of service; the affected CVE range includes CVE-2009-3555 through CVE-2012-0508.
Several vulnerabilities—including CVE-2010-0886, CVE-2010-0887, CVE-2011-0802, and CVE-2012-0497 through CVE-2012-0500—were rated CVSS v2 10.0. HP issued operating-system-specific JDK hotfixes under bulletin HPSBMU02799 (SSRT100867) and required customers to install NNMi 9.0x Patch 5 before applying the updates.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
Hewlett-Packard issued Security Bulletin HPSBMU02799 (SSRT100867 rev.1) for remotely exploitable JDK vulnerabilities in HP Network Node Manager i 9.0x on HP-UX, Linux, Solaris, and Windows. HP provided operating-system-specific JDK hotfixes, requiring NNMi 9.0x Patch 5, to address risks including unauthorized disclosure, modification, and denial of service.
HPE published Security Bulletin HPSBMU03584 rev.2 addressing multiple remote vulnerabilities in HPE Network Node Manager i (NNMi).
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
h20566.www2.hpe.com
Open sourcemarc.info
Open sourceh20566.www2.hp.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
HP released bulletin **HPSBMA02535** (`SSRT100029 rev.1`) to remediate nine vulnerabilities in HP Performance Manager versions 8.10, 8.20, and 8.21 for HP-UX, Linux, Solaris, and Windows. The flaws could enable remote unauthorized access, cross-site scripting, and denial-of-service conditions; **CVE-2009-3548** was rated highest, with a CVSS v2 base score of 7.5 and potential impact to confidentiality, integrity, and availability. HP issued platform-specific updates: `HPPM8CPI_00001` for HP-UX IA, `HPPM8CPP_00001` for HP-UX PA, `HPPM8CPL_00001` for Linux, `HPPM8CPS_00001` for Solaris, and `HPPM8CPW_00001` for Windows. Related Apache Tomcat advisories also addressed **CVE-2009-0580**, a FORM-authentication user-enumeration flaw in Tomcat 4.1.x, 5.5.x, and 6.0.x that lets remote attackers identify valid usernames through malformed URL-encoded password input to `/j_security_check`.
Aug 29, 2026
Hewlett Packard Enterprise released security updates for **HPE Networking Instant On Access Points** to fix two vulnerabilities affecting firmware version `3.2.0.1` and earlier. The most severe issue, **`CVE-2025-37103`**, is a critical hard-coded credentials flaw with a **CVSS score of 9.8** that could allow a remote attacker to gain administrative access to the device web interface. HPE documented the issues in security bulletin **`HPESBNW04894`** and urged customers to update affected systems. HPE also patched **`CVE-2025-37102`**, a high-severity vulnerability with a **CVSS score of 7.2** that allows a remote authenticated attacker to inject arbitrary commands into the device console and execute commands on the underlying system. The company recommended immediate upgrades to firmware version `3.2.1.0` or later to reduce the risk of unauthorized access and command execution on exposed access points.
Jul 24, 2026
Hewlett Packard Enterprise issued security bulletins for multiple vulnerabilities affecting HPE Networking Instant On access points, HPE Telco Service Orchestrator, HPE Unified OSS Console, Compute Scale-up Server 3200 and 3250 platforms, and HPE Superdome Flex systems. The disclosures include unspecified flaws as well as vulnerabilities enabling remote RMC file modification and remote command execution on specified enterprise-server platforms. Administrators should identify affected HPE assets, review the applicable product security bulletins, and upgrade to the listed fixed versions or later where available. Organizations should prioritize remediation of internet-accessible and operationally critical server-management systems, given the potential impact of remote command execution and unauthorized file modification.
Oct 1, 2026