Back to CVE Browser

CVE-2025-37164

🔥 Known Exploited (CISA KEV)CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-12-16

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

A remote code execution issue exists in HPE OneView.

Affected Platforms (CPE)

📦

Hpe

Oneview

<= 10.20.00

References & Advisories

🔗 https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04985en_us&docLocale=en_US

🔗 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/hpe_oneview_rce.rb

🔗 https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04985en_us&docLocale=en_US#vulnerability-summary-1

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-37164

Related Vulnerabilities

CVE-2025-371018.7

A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC). This vulnerability could be expl...

CVE-2023-65735.5

HPE OneView may have a missing passphrase during restore.

CVE-2023-502757.5

HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.

CVE-2023-502747.8

HPE OneView may allow command injection with local privilege escalation.