CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-94

Description

A remote code execution issue exists in HPE OneView.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
HPE OneView 11.00	premières → < 11.00	11.00

Autres CVE de HPE OneView

Les 11 CVE de HPE OneView →

CVE-2024-42508 This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users 5.5 Moyenne CVE-2023-30912 A remote code execution issue exists in HPE OneView 7.2 Élevée CVE-2023-30909 A remote authentication bypass issue exists in some OneView APIs 9.8 Critique CVE-2023-30908 A remote authentication bypass issue exists in a OneView API 9.8 Critique