9.8
Critical
CVE-2025-37087 A vulnerability in the cmdb service of the HPE Performance Cluster Manager (HPCM) could allow an attacker to gain access…
Description
A vulnerability in the cmdb service of the HPE Performance Cluster Manager (HPCM) could allow an attacker to gain access to an arbitrary file on the server host.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Performance Cluster Manager (HPCM) 1.12 | earliest → 1.12 | No fix stated |