Executive brief
HPE's Analytics and Location Engine (ALE) is a network management system that tracks and monitors device locations and network analytics. Multiple vulnerabilities in this system could allow attackers without credentials to deny service or access sensitive network information by sending specially crafted requests or exploiting misconfiguration.
Technical details
Multiple vulnerabilities in HPE ALE allow unauthenticated remote attackers to cause denial of service or gain unauthorized access to sensitive information through specially crafted input or improper security configurations. These flaws are exploitable remotely without prior authentication. The vulnerabilities may be addressed through HPE security updates.
Affected products
- HPE Analytics and Location Engine
Timeline
- 2026-09-22: disclosed