H3C vulnerabilities
- In CISA's KEV catalog
- 0 exploited vulnerabilities
- CVE records, last 3 years
- 68 since
Rank 242 of 467 vendors on this site - Critical or high
- 77.9% of 68 scored records; 0 not scored
Source: CISA KEV 2026.11.10, as of ; CVE List, as of . About the data.
- H3C has 68 CVE records published between 12 Nov 2023 and 12 Nov 2026, ranking #242 of 467 vendors on this site by that count.
- Of the 68 with a CVSS score, 53 (77.9%) are rated critical or high; 0 (0% of all) have no CVSS score.
- None of the CVE records attributed to H3C is listed in CISA's KEV catalog as of 12 Nov 2026.
CVE records per year, by severity
- Critical
- High
- Medium, low or none
- Not scored
* 2026 is counted through .
Show data as a table
| Year | Records | Critical | High | Critical or high | Not scored |
|---|---|---|---|---|---|
| 2026* | 25 | 3 | 15 | 72% | 0% |
| 2025 | 34 | 0 | 28 | 82.4% | 0% |
| 2024 | 9 | 5 | 2 | 77.8% | 0% |
| 2023 | 13 | 0 | 0 | 0% | 84.6% |
| 2022 | 0 | 0 | 0 | — | — |
| 2021 | 0 | 0 | 0 | — | — |
| 2020 | 0 | 0 | 0 | — | — |
| 2019 | 0 | 0 | 0 | — | — |
| 2018 | 0 | 0 | 0 | — | — |
| 2017 | 0 | 0 | 0 | — | — |
"Critical or high" is the share of scored records; "Not scored" is the share of all records.
Source: CVE List, as of . About the data.
H3C vulnerabilities reported exploited, not in CISA KEV
Listed in VulnCheck KEV, which cites public reports of exploitation in the wild. CISA has not confirmed these in its own catalog. Most recently listed first.
- CVE-2023-54405 H3C CVM Unauthenticated File Upload via fileUpload/upload Token
- CVE-2024-32238 H3C ER8300G2-X is vulnerable to Incorrect Access Control.
Source: VulnCheck KEV, as of ; CISA KEV 2026.11.10, as of ; CVE List, as of . About the data.
H3C vulnerabilities not in KEV yet
Recent records that CISA has not added to KEV, with a high exploit probability (EPSS) or an early exploitation signal; see the watchlist. A probability is not a report of exploitation.
- CVE-2026-112370 H3C Magic NX15 usrlist sub_416874 os command injection
- CVE-2026-112371 H3C Magic NX15 RPC esps write code injection
Source: FIRST EPSS, as of ; CVE List, as of ; CISA KEV 2026.11.10, as of . About the data.
Highest exploit-prediction scores (EPSS)
EPSS estimates the probability that a vulnerability is exploited in the next 30 days. The highest-scoring H3C records today, from 1%.
- CVE-2024-32238
- CVE-2026-3943
- CVE-2024-52765
- CVE-2025-2725
- CVE-2026-18900
- CVE-2026-18902
- CVE-2026-18811
- CVE-2026-18812
- CVE-2026-18813
- CVE-2026-18814
Source: FIRST EPSS, as of ; CVE List, as of ; CISA KEV 2026.11.10, as of . About the data.