6.9
Medium
CVE-2025-37090 A server-side request forgery vulnerability exists in HPE StoreOnce Software
Description
A server-side request forgery vulnerability exists in HPE StoreOnce Software.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE StoreOnce Software 4.3 | earliest → < 4.3.11 | 4.3.11 |
Other CVEs of HPE StoreOnce Software
The 8 CVEs of HPE StoreOnce Software →
CVE-2025-37096
A command injection remote code execution vulnerability exists in HPE StoreOnce Software
7.5
High
CVE-2025-37095
A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software
5.9
Medium
CVE-2025-37094
A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software
5.5
Medium
CVE-2025-37093
An authentication bypass vulnerability exists in HPE StoreOnce Software
9.8
Critical