#cve-2025-37164

[ follow ]
#hpe-oneview
fromwww.theregister.com
5 days ago
Information security

HPE OneView RCE bug scores a perfect 10

A critical unauthenticated remote code execution vulnerability (CVE-2025-37164) in HPE OneView allows attackers centralized control; customers must upgrade or apply hotfix immediately.
fromThe Hacker News
6 days ago
Information security

HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution

HPE OneView contains a maximum-severity RCE vulnerability (CVE-2025-37164) fixed in version 11.00; hotfixes are available for earlier releases.
fromTechzine Global
5 days ago

HPE OneView requires patch for vulnerability with highest CVE score

Hewlett Packard Enterprise has fixed a critical vulnerability in OneView Software that allows remote code execution. The bug received the maximum CVSS score of 10.0 and has now been fixed in version 11.00. HPE announced in a security advisory that the vulnerability, numbered CVE-2025-37164, is extremely dangerous. An unauthenticated attacker could remotely execute code by exploiting this flaw. OneView is an IT infrastructure management solution that controls all systems within organizations from a single central dashboard.
Information security
[ Load more ]