cve detail

CVE-2025-37164

naam

Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code execution.

KEV

bekend misbruikt

EPSS

percentiel

vendor

Hewlett Packard Enterprise (HPE)

product

OneView

toegevoegd aan KEV

07 jan 2026

due date

28 jan 2026

ransomware

Unknown

CWE

CWE-94

EPSS datum

aanbevolen actie

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

notities

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04985en_us&docLocale=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2025-37164