Known vulnerabilities in Hewlett Packard Enterprise (HPE) HPE OneView

Is your version affected?

CVE	Summary	Score	Published
CVE-2025-37164	Exploited Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability	10.0 Critical	Dec 16, 2025
CVE-2024-42508	This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users	5.5 Medium	Oct 18, 2024
CVE-2023-30912	A remote code execution issue exists in HPE OneView	7.2 High	Oct 25, 2023
CVE-2023-30909	A remote authentication bypass issue exists in some OneView APIs	9.8 Critical	Sep 14, 2023
CVE-2023-30908	A remote authentication bypass issue exists in a OneView API	9.8 Critical	Sep 7, 2023
CVE-2023-28090	An HPE OneView appliance dump may expose SNMPv3 read credentials	5.5 Medium	Apr 25, 2023
CVE-2023-28089	An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules	7.1 High	Apr 25, 2023
CVE-2023-28088	An HPE OneView appliance dump may expose SAN switch administrative credentials	7.8 High	Apr 25, 2023
CVE-2023-28087	An HPE OneView appliance dump may expose OneView user accounts	5.5 Medium	Apr 25, 2023
CVE-2023-28086	An HPE OneView appliance dump may expose proxy credential settings	5.5 Medium	Apr 25, 2023
CVE-2023-28091	HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView…	5.5 Medium	Apr 14, 2023